Cisco PIX 501 Hardware Installation Guide

6-8
Cisco PIX Firewall Hardware Installation Guide
78-15170-01
Chapter 6 PIX 525
Installing LAN-Based Failover
Installing LAN-Based Failover
LAN-based failover supports failover between two units connected over a dedicated Ethernet interface.
LAN-based failover eliminates the need for a special failover cable and overcomes the distance
limitations imposed by the failover cable.
Note Both PIX Firewall units must be the same model number, have the same amount of RAM, Flash memory,
number and type of interfaces, and be running the same software version.
Complete these steps to set up a LAN-based failover connection:
Step 1 Disconnect both the PIX Firewall units, so that there is no traffic flow between them. If the Failover cable
is connected to the PIX Firewall, disconnect it.
Step 2 Configure the PIX Firewall units. For information on configuring the PIX Firewall, refer to “ Configuring
the LAN-Based Failover,” section in Chapter 10 “Using PIX Firewall Failover” in the Cisco PIX Firewall
and VPN Configuration Guide.
Step 3 Power off both the units.
Step 4 Connect the LAN failover interfaces to the dedicated switch/hub, as shown in Figure 6-7.
Note A dedicated LAN interface and a dedicated switch (or VLAN) is required to implement
LAN-based failover. You cannot use a crossover Ethernet cable to connect the two PIX Firewall
units.
Figure 6-7 LAN- Based Failover Connections
PIX 525
PIX 525
F
A
I
L
O
V
E
R
1
0
0
M
b
p
s
A
C
T
1
0
0
M
b
p
s
A
C
T
L
I
N
K
L
I
N
K
1
0
/
1
0
0
E
T
H
E
R
N
E
T
1
1
0
/
1
0
0
E
T
H
E
R
N
E
T
0
U
S
B
C
O
N
S
O
L
E
P
I
X
-
5
2
5
F
A
I
L
O
V
E
R
1
0
0
M
b
p
s
A
C
T
1
0
0
M
b
p
s
A
C
T
L
I
N
K
L
I
N
K
1
0
/
1
0
0
E
T
H
E
R
N
E
T
1
1
0
/
1
0
0
E
T
H
E
R
N
E
T
0
U
S
B
C
O
N
S
O
L
E
P
I
X
-
5
2
5
87366
Dedicated Ethernet
interface
Hub/switch
Dedicated Ethernet
interface
87367

Cisco PIX 501 Specifications

General

VPN Throughput	3 Mbps
Maximum VPN Peers	10
Firewall Type	Stateful
Power Supply	12V DC
Interfaces	4 x 10BASE-T Ethernet