WEB开发网
开发学院网络安全防火墙 配置PIX Failover(一) 阅读

配置PIX Failover(一)

 2008-12-18 12:19:02 来源:WEB开发网   
核心提示: 在接口IP地址右边的标志有如下类型:Failed—接口失效.Link Down—接口链路层协议Normal—正常Shut Down—该接口被手工停用了(在interfac命令中使用了shutown参数)Unknown—该接口未配置

在接口IP地址右边的标志有如下类型:

Failed—接口失效.

Link Down—接口链路层协议

Normal—正常

Shut Down—该接口被手工停用了(在interfac命令中使用了shutown参数)

Unknown—该接口未配置IP地

Waiting—还没有开始监视对端的接口状态。

第十一步 使用failover ip address命令声明备用PIX的每一个接口的地址,只需要在主pix上配置,该地址不能和主PIX的地址相当,但每一个接口的地址都可以在同一个子网内。如下例年示:

  failover ip address inside 10.1.1.2
  failover ip address outside 192.168.1.2
  failover ip address intf2 192.168.2.2
  failover ip address intf3 192.168.3.2
  failover ip address 4th 172.16.1.2
  

配置后,再show failover的输出如下:

  show failover
  Failover On
  Cable status: Other side powered off
  Reconnect timeout 0:00:00
  Poll frequency 15 seconds
  This host: primary - Active
  Active time: 510 (sec)
  Interface 4th (172.16.1.1): Normal (Waiting)
  Interface intf3 (192.168.3.1): Normal (Waiting)
  Interface intf2 (192.168.2.1): Normal (Waiting)
  Interface outside (192.168.1.1): Normal (Waiting)
  Interface inside (10.1.1.1): Normal (Waiting)
  Other host: secondary - Standby
  Active time: 0 (sec)
  Interface 4th (172.16.1.2): Unknown (Waiting)
  Interface intf3 (192.168.3.2): Unknown (Waiting)
  Interface intf2 (192.168.2.2): Unknown (Waiting)
  Interface outside (192.168.1.2): Unknown (Waiting)
  Interface inside (10.1.1.2):

上一页  1 2 3 4 5 

Tags:配置 PIX Failover

编辑录入:爽爽 [复制链接] [打 印]
赞助商链接