Cisco PIX 525 Especificações descarregar pdf (Página 134)

11-2

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 11 Configuring Failover

Understanding Failover

Failover System Requirements

This section describes the hardware, software, and license requirements for security appliances in a

failover configuration. This section contains the following topics:

• Hardware Requirements, page 11-2

• Software Requirements, page 11-2

• License Requirements, page 11-2

Hardware Requirements

The two units in a failover configuration must have the same hardware configuration. They must be the

same model, have the same number and types of interfaces, the same amount of Flash memory, and the

same amount of RAM.

Software Requirements

The two units in a failover configuration must be in the operating modes (routed or transparent, single

or multiple context). They have the same major (first number) and minor (second number) software

version. However, you can use different versions of the software during an upgrade process; for example,

you can upgrade one unit from Version 7.0(1) to Version 7.0(2) and have failover remain active. We

recommend upgrading both units to the same version to ensure long-term compatibility.

License Requirements

On the PIX security appliance platform, at least one of the units must have an unrestricted (UR) license.

The other unit can have a Failover Only (FO) license, a Failover Only Active-Active (FO_AA) license,

or another UR license. Units with a Restricted license cannot be used for failover, and two units with FO

or FO_AA licenses cannot be used together as a failover pair.

Note The FO license does not support Active/Active failover.

The FO and FO_AA licenses are intended to be used solely for units in a failover configuration and not

for units in standalone mode. If a failover unit with one of these licenses is used in standalone mode, the

unit will reboot at least once every 24 hours until the unit is returned to failover duty. A unit with an FO

or FO_AA license operates in standalone mode if it is booted without being connected to a failover peer

with a UR license. If the unit with a UR license in a failover pair fails and is removed from the

configuration, the unit with the FO or FO_AA license will not automatically reboot every 24 hours; it

will operate uninterrupted unless the it is manually rebooted.

When the unit automatically reboots, the following message displays on the console:

=========================NOTICE=========================

This machine is running in secondary mode without

a connection to an active primary PIX. Please

check your connection to the primary system.

REBOOTING....

========================================================

1 2 ... 129 130 131 132 133 134 135 136 137 138 139 ... 603 604

Sem comentários

Cisco PIX 525 Especificações Página 134