Prev | Current Page 313 | Next

Yusuf Bhaiji

"Network Security Technologies and Solutions"


Use any unused Ethernet interface on the Security Appliance as a dedicated state link.
2.
When using LAN-based failover, use the failover link for a state link (same Ethernet for dual purpose).
3.
Use the regular data Ethernet interface for the state link; however, this is not a recommended practice, although supported.
The state link interface is not configured as a normal networking interface for normal operations; it exists only for stateful failover
communications and, optionally, for the failover communication when the state and failover links are shared. Connect the state by using a dedicated hub/switch, or segment it with a VLAN with no hosts or devices on the link or by using a crossover Ethernet
cable to link the units directly.
Failover Implementation
The failover implementation on the Security Appliance can be deployed in two options: the Serial Cable Failover link or LAN-failover link modes.
Serial Cable Failover Link (PIX 500 Series Only)
The serial Failover cable, or cable-based failover , is available only on the PIX 500 series platform. This design is recommended use when the two PIX units are within six feet of each other. The main advantage of using this type of cable is that it is a dedicated
serial cable, which provides faster convergence.


Pages:
301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325