Chapter 14. Failover

Upon completion of this chapter, you will be able to perform the following tasks:

  • Describe how failover works.

  • Define the primary, secondary, active, and standby PIX Firewalls.

  • Identify the four failover interface tests.

  • Define failover, LAN-based failover, and stateful failover.

  • Configure failover.

  • Configure stateful failover.

  • Configure LAN-based stateful failover.

The failover function for the Cisco Secure PIX Firewall provides a safeguard if a PIX Firewall fails. Specifically, when one PIX Firewall fails, another unit takes its place. For failover to work, both firewalls must be exactly the same model and have the same number and types of interfaces, software version, activation key type, Flash memory, and RAM.

Two PIX Firewalls ...

Get CCSP Self-Study: Cisco Secure PIX Firewall Advanced (CSPFA), Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.