5-7
Cisco PIX Firewall Hardware Installation Guide
78-15170-01
Chapter 5 PIX 520
Installing Failover
Installing Failover
Complete these steps to install a failover connection:
Note This section only applies to PIX Firewall units with a “UR” (unrestricted) license.
Step 1 Power off both the primary and secondary units.
Note Both PIX Firewall units has to be the same model number, have at least as much RAM, have the
same Flash memory size, and be running the same software version.
Step 2 Locate the failover cable (shown in Figure 5-9). This cable is shipped separately from the PIX Firewall
unit. The cable is labeled Primary on one end and Secondary on the other. Install the cable for the PIX
520 as shown in Figure 5-9.
Figure 5-9 PIX 520 Failover Cable Connection
Step 3 Connect the Primary end of the failover cable to the first PIX Firewall unit, that is, the one you have
already configured.
Step 4 Connect the Secondary end of the failover cable to the standby unit.
Step 5 Connect a power cord to the power connector on the rear panel of each unit, and the other end of each
power cord to (preferably separate) power outlets.
Step 6 If you are using Stateful Failover, use one of the following types of connections, that is appropriate for
your system, between the dedicated interfaces on the PIX Firewall units:
• Cat 5 crossover cable directly connecting the primary unit to the secondary unit.
• 100BaseTX half-duplex hub using straight Cat 5 cables.
• 100BaseTX full duplex on a dedicated switch or dedicated VLAN of a switch.
Note All enabled interfaces must be connected between the active and standby units. Only configure
the active unit. On the PIX 520, you can access the console and determine which unit is active
with the show failover command.
F
A
I
L
O
V
E
R
F
A
I
L
O
V
E
R
12395
S
E
C
O
N
D
A
R
Y
P
R
I
M
A
R
Y
Primary end
Secondary end
To Next Page
Loading...
Need help?
General
