4-12
Cisco PIX Security Appliance Hardware Installation Guide
78-15170-03
Chapter 4 PIX 515/515E
Installing LAN-Based Failover
Installing LAN-Based Failover
LAN-based failover supports failover between two units connected over a dedicated Ethernet interface.
LAN-based failover eliminates the need for a special failover cable and overcomes the distance
limitations imposed by the failover cable.
Note
Both chassis must be the same model number, have the same amount of RAM, Flash memory, number
and type of interfaces, and be running the same software version.
To set up a LAN-based failover connection, perform the following steps:
Step 1
Disconnect both PIX security appliances, so that there is no traffic flow between them. If the failover
cable is connected to the PIX security appliance, disconnect it.
Step 2
Configure the PIX security appliances for LAN-based failover. Refer to the chapter on configuring
LAN-based failover in the
online at:
http://www.cisco.com/en/US/products/sw/secursw/ps2120/prod_configuration_guides_list.html
Step 3
Power off both units.
Step 4
Connect the LAN failover interfaces to the dedicated switch/hub, as shown in
.
Note
A dedicated LAN interface and a dedicated switch (or VLAN) is required to implement
LAN-based failover. You cannot use a crossover Ethernet cable to connect the two PIX security
appliances.
Figure 4-12 LAN-Based Failover Connections
DO NOT INSTALL INTERFACE
CARDS WITH POWER APPLIED
CONSOLE
10/100 ETHERNET 0
Link
FDX
FDX
100 Mbps
Link
100 Mbps
FAILOVER
10/100 ETHERNET 1
PIX-515
DO NOT INSTALL INTERFACE
CARDS WITH POWER APPLIED
CONSOLE
10/100 ETHERNET 0
Link
FDX
FDX
100 Mbps
Link
100 Mbps
FAILOVER
10/100 ETHERNET 1
PIX-515
87313
PIX 515
PIX 515
Dedicated Ethernet
interface
Hub/switch
Dedicated Ethernet
interface
