配置PIX Failover(二)

核心提示： 第七步在interface配置正确后使用clear xlate命令.第八步正确配置接口的IP地址，配置完后可以使用show ip address命令查看：show ip addressSystem IP Addresses:ip address outside 192.168.1.1 25

第七步　在interface配置正确后使用clear xlate命令.

第八步　正确配置接口的IP地址。配置完后可以使用show ip address命令查看：

　　show ip address
　　System IP Addresses:
　　ip address outside 192.168.1.1 255.255.255.0
　　ip address inside 10.1.1.1 255.255.255.0
　　ip address intf2 192.168.2.1 255.255.255.0
　　ip address intf3 192.168.3.1 255.255.255.0
　　ip address 4th 172.16.1.1 255.255.255.0
　　Current IP Addresses:
　　ip address outside 192.168.1.1 255.255.255.0
　　ip address inside 10.1.1.1 255.255.255.0
　　ip address intf2 192.168.2.1 255.255.255.0
　　ip address intf3 192.168.3.1 255.255.255.0
　　ip address 4th 172.16.1.1 255.255.255.0

当主PIX处于活动状态时，Current IP Addresses和System IP Addresses相同，当主PIX得失效状态时，Current IP Addresses会变成备用PIX的IP地址.

第九步　在主PIX上使用failover命令启用Failover。

第十步　使用show failover验证状态，输出如下：

　　show failover
　　Failover On
　　Cable status: Other side powered off
　　Reconnect timeout 0:00:00
　　Poll frequency 15 seconds
　　This host: primary - Active
　　Active time: 225 (sec)
　　Interface 4th (172.16.1.1): Normal (Waiting)
　　Interface intf3 (192.168.3.1): Normal (Waiting)
　　Interface intf2 (192.168.2.1): Normal (Waiting)
　　Interface outside (192.168.1.1): Normal (Waiting)
　　Interface inside (10.1.1.1): Normal (Waiting)
　　Other host: secondary - Standby
　　Active time: 0 (sec)
　　Interface 4th (0.0.0.0): Unknown (Waiting)
　　Interface intf3 (0.0.0.0): Unknown (Waiting)
　　Interface intf2 (0.0.0.0): Unknown (Waiting)
　　Interface outside (0.0.0.0): Unknown (Waiting)
　　Interface inside (0.0.0.0): Unknown (Waiting)