PIX/ASA Failover ques - oops posted this on incorrect section :(

swapnendum · ‎07-25-2007

Can i use the same name/IP address for LAN and statefull link ?

Below is the config, PIX accepts this config, just wanted to confirm if it'll wrk fine this way.

failover lan interface LAN-AND-STATE Ethernet2

failover link LAN-AND-STATE Ethernet2

failover interface ip LAN-AND-STATE 10.10.10.1 255.255.255.252 standby 10.10.10.2

Also, if I use the same physical interface and assign 2 different set of names and different set of IP's , is this fine ..

e.g.

failover lan interface LAN Ethernet2

failover link STATE Ethernet2

failover interface ip LAN 10.1.1.1 255.255.255.252 standby 10.1.1.2

failover interface ip STATE 10.2.2.1 255.255.255.252 standby 10.2.2.2

any comments guys ?

sathishd-aus · ‎07-27-2007

Hi,

1. PIX supports LAN based failover and stateful failover configured on the same interface. The first configuration allows the interface to send the configuration changes and also the stateful session changes.

2. For your second question the you cannot assign two names of a same interface. So the second configuration won't work.