本文转自:http://blog.sina.com.cn/s/blog_a70750300101h5s0.html
拓扑 :这个拓扑比较的简单这里不需要解释:
pix1的完整配置:
interface Ethernet0
description LAN Failover Interface
!
interface Ethernet1
nameif inside
security-level 100
ip address 192.168.1.1 255.255.255.0 standby 192.168.1.2
!
interface Ethernet2
nameif outside
security-level 0
ip address 192.168.2.1 255.255.255.0 standby 192.168.2.2
!
interface Ethernet3
description STATE Failover Interface
failover lan unit primary
failover lan interface wangjie Ethernet0
failover key 123
failover link state Ethernet3
failover interface ip wangjie 192.168.100.1 255.255.255.0 standby 192.168.100.2
failover interface ip state 192.168.200.1 255.255.255.0 standby 192.168.200.2
failover lan enable
failover
pix2的配置:
failover lan unit secondary
failover lan interface wangjie Ethernet0
failover key 123
failover link state Ethernet3
failover interface ip wangjie 192.168.100.1 255.255.255.0 standby 192.168.100.2
failover interface ip state 192.168.200.1 255.255.255.0 standby 192.168.200.2
failover lan enable
failover
打开e0和e3
测试:
两边的基本情况,在这里看。
这个地址是自动配置的
在这里就表示测试成功了
评论