Chapter 7 PIX 535

Installing Failover

Installing Failover

To set up a failover connection, perform the following steps:

Step 1 Power off both the primary and secondary units.

Note Both chassis must be the same model number, have at least as much RAM, have the same Flash memory size, and be running the same software version. Note that the PIX-4FE and PIX-4FE-66 cards are considered equivalent and interchangeable. You can install a PIX-4FE in the primary unit and a PIX-4FE-66 in the secondary unit, as long as you install them in the same slot number of each chassis. For example, if you install a PIX-4FE in Slot 1 of the primary unit, you must also install the PIX-4FE-66 in Slot 1 of the secondary unit.

Step 2 Locate the failover cable (shown in Figure 7-5). This cable is shipped separately from the PIX security appliance. The cable is labeled “Primary” on one end and “Secondary” on the other.

Install the cable for the PIX 535 as shown in Figure 7-5.

Figure 7-5 PIX 535 Failover Cable Connection

F

A

I

L

O

V

E

R

Y

R

A

IM

R

P

Primary end

 

 

RY

 

DA

ON

 

SEC

 

 

Secondary end

F A I L O V E R

12395

Step 3 Connect the Primary end of the failover cable to the first PIX security appliance, that is, the one you have already configured.

Step 4 Connect the Secondary end of the failover cable to the standby unit.

Step 5 Connect a power cord to the power connector on the rear panel of each unit, and the other end of each power cord to (preferably separate) power outlets.

Step 6 If you are using Stateful Failover, use one of the following types of connections, that is appropriate for your system, between the dedicated interfaces on the PIX security appliance:

Category 5 crossover cable directly connecting the primary unit to the secondary unit

100BaseTX full duplex on a dedicated switch or dedicated VLAN of a switch

1000BaseTX full duplex on a dedicated switch or dedicated VLAN of a switch

Note For Stateful Failover on the PIX 535, you must use a Gigabit Ethernet (GE) failover link with GE interfaces.

Cisco PIX Security Appliance Hardware Installation Guide

7-8

78-15170-03

 

 

Page 8
Image 8
Cisco Systems user service Installing Failover, PIX 535 Failover Cable Connection