Network Diagram of Failover Configuration
Configuring failover involves defining your configuration on the primary Security Appliance
or virtual context. This configuration is then replicated to the standby Security Appliance or
Example 12-3 Sample Configuration for primary-PIX
hostname primary-PIX
interface Ethernet0
speed 100
duplex full
nameif outside
security-level 0
ip address 192.168.1.1 255.255.255.0 standby 192.168.1.2
interface Ethernet1
speed 100
duplex full
nameif inside
security-level 2
ip address 10.10.10.1 255.255.255.0 standby 10.10.10.2
interface Ethernet2
description LAN/STATE failover
shutdown
failover lan unit primary
failover lan interface failover Ethernet4
failover lan enable
failover link failover Ethernet4
failover interface ip failover 172.16.10.1 255.255.255.0 standby 172.16.10.2
global (outside) 1 192.168.1.15-192.168.1.40 netmask 255.255.255.224
nat (inside) 1 0.0.0.0 0.0.0.0 0 0