ASA防火墙12 故障切换
·
A/S
·
A/A
·
hello
：
15S *3
·
防火墙之间用交换连，不要直接用网线连接（依赖于防火墙接口，当接口发生故障时，两
FW
都以为自身接口发生故障）
spanning-tree portfast
switchport mode access
ciscoasa(config)# failover ?
configure mode commands/options:
interface Configure the IP address and mask to be used for failover
and/or stateful update information
interface-policy Set the policy for failover due to interface failures
key Configure the failover shared secret or key
lan Specify the unit as primary or secondary or configure the
interface and vlan to be used for failover communication
link Configure the interface and vlan to be used as a link for
stateful update information
mac Specify the virtual mac address for a physical interface
polltime Configure failover poll interval
replication Enable HTTP (port 80) connection replication
timeout Specify the failover reconnect timeout value for
asymmetrically routed sessions
--------------------------------
案例
--------------------------------------------------------------------
failover
failover lan unit primary
failover lan interface myinterface Ethernet0
/
3
failover link myinterface Ethernet0/3
failover interface ip myinterface 10.3.3.1 255.255.255.0 standby 10.3.3.2
failover mac address Ethernet0/1 0018.1900.5000 0018.1900.5001
failover mac address Ethernet0/0 0018.1900.4000 0018.1900.4001
failover mac address Ethernet0/2 0018.1900.6000 0018.1900.6001
failover mac address Management0
/
0 0018.1900.7000 0018.1900.7001