Prev | Current Page 315 | Next

Yusuf Bhaiji

"Network Security Technologies and Solutions"

The link should be connected either via a dedicated switch or by putting in a VLAN with no other hosts/devices, or by connecting a crossover Ethernet cable. In multiple context mode, the failover link needs to be on the system context (admin context). Figure
6-21 shows a configuration example.
Figure 6-21. LAN-Based Failover (Active/Standby)
[View full size image]
Note
Refer to Cisco documentation for additional failover configuration examples, such as LAN-based Active/Active:
http://www.cisco.com/en/US/products/ps6120/products_configuration_guide_chapter09186a008045247e.html#wp1046980
.
Asymmetric Routing Support (ASR)
The Active/Active mode additionally provisions the ASR (Asymmetric Routing Support) feature. The ASR technology allows the to forward the received packet for which it does not have an active connection by looking for a corresponding connection on other interfaces in the asynchronous routing group. In regular firewall mode, if the connection originates through one device, the ISP routes the return traffic through another device, the packet is dropped. ASR prevents the return packets from being
dropped in such environments. With the ASR feature, the connection information is forwarded to the secondary pair unit, and forward the traffic to the unit that holds the connection information.


Pages:
303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327