【MVS】思科 ASA Failover 配置

 

 

4. Failover 配置步骤

ASA1 ! Bring up the interfaces that will be used for lan failover (G3) and state failover (G4) interface GigabitEthernet3 no shutdown ! interface GigabitEthernet4 no shutdown ! Apply the IP address along with the keword "standby" and ! the standby address that will be used by the unit in standby mode interface GigabitEthernet0 nameif OUTSIDE security-level 0 ip address 192.168.1.1 255.255.255.0 standby 192.168.1.2 ! interface GigabitEthernet1 nameif INSIDE security-level 100 ip address 172.16.0.1 255.255.255.0 standby 172.16.0.2 ! interface GigabitEthernet2 nameif DMZ security-level 50 ip address 10.0.0.1 255.255.255.0 standby 10.0.0.2 ! Tell the ASA that G3 will be named "LAN_FAIL" and that it will be used ! to replicate the configuration between ASA1 and ASA2 failover lan interface LAN_FAIL GigabitEthernet3 ! Use the failover command to assign "LAN_FAIL" the active ! and standby IP addresses failover interface ip LAN_FAIL 10.1.1.1 255.255.255.252 standby 10.1.1.2 ! Tell the ASA that G4 will be named "LINK_FAIL" and assign the IP address for active ! and standby. Note that the word 'link' is the clue to identify this as the stateful connection failover link LINK_FAIL GigabitEthernet4 failover interface ip LINK_FAIL 10.2.2.1 255.255.255.252 standby 10.2.2.2 ! Tell this ASA that it's title will be "PRIMARY" failover lan unit primary ! Enable failover failover ASA2 On standby unit, just need to do the following configuration, and the rest will be automatically replicated from the Active device. interface GigabitEthernet3 no shutdown ! failover lan interface LAN_FAIL GigabitEthernet3 failover interface ip LAN_FAIL 10.1.1.1 255.255.255.252 standby 10.1.1.2 ! failover failover replication http //replicate the HTTP sessions prompt hostname priority state //efault hostname will be the same for both active and standby units, due to the configuration being replicated. 配置之后会显示 ASA1/pri/act# 或者 ASA1/sec/stby# failover key ***** // 配置密码