Cisco PIX 501 Hardware Installation Guide

5-9
Cisco PIX Firewall Hardware Installation Guide
78-15170-01
Chapter 5 PIX 520
Installing LAN-Based Failover
Figure 5-10 LAN- Based Failover Connections
Step 5 If you are using Stateful Failover, use one of the following types of connections, that is appropriate for
your system, between the dedicated interfaces on the PIX Firewall units:
• Cat 5 crossover cable directly connecting the primary unit to the secondary unit.
• 100BaseTX full duplex on a dedicated switch or dedicated VLAN of a switch.
• 1000BaseTX full duplex on a dedicated switch or dedicated VLAN of a switch.
Note For Stateful Failover on the PIX 520, if you have Gigabit Ethernet (GE) interfaces,
then the failover link must be GE.
Caution Do not turn the power on until the units are connected and the primary unit is configured completely.
Step 6 Power the primary unit on first, then power on the secondary unit. Within a few seconds, the active unit
automatically downloads its configuration to the standby unit.
If the primary unit fails, the secondary unit automatically becomes active.
P
IX
F
irew
all
S
E
R
I
E
S
R
E
S
E
T
P
IX
F
irew
all
S
E
R
I
E
S
R
E
S
E
T
87366
Dedicated Ethernet
interface
Hub/switch
Dedicated Ethernet
interface
PIX 520
PIX 520

Cisco PIX 501 Specifications

General

VPN Throughput	3 Mbps
Maximum VPN Peers	10
Firewall Type	Stateful
Power Supply	12V DC
Interfaces	4 x 10BASE-T Ethernet