Chinaunix

标题: 思科ASA5585的failover如何取消对interface Management的监控 [打印本页]

作者: xuxic 时间: 2013-01-22 17:18
标题: 思科ASA5585的failover如何取消对interface Management的监控
最近公司上了两台思科ASA5585防火墙，配置了failover主备，主备倒换和接口进行了关联，任一端口down，主备就会进行切换。

有点想不通，有必要和网管接口（interface Management）关联吗，网管口毕竟没那么重要，是通过网线连的，很容易出现松动，这样会导致不必要的倒换。问过厂家了，他们说什么就是这样的，改不了，对ASA设备不熟，请教下大家该怎么取消failover和网管接口的关联。

interface Management0/0
nameif management
security-level 0
ip address 10.250.180.209 255.255.255.240 standby 10.250.180.210
management-only
!
interface TenGigabitEthernet0/8
!
interface TenGigabitEthernet0/8.1
description LAN Failover Interface
vlan 2
!
interface TenGigabitEthernet0/8.2
description STATE Failover Interface
vlan 3
!
interface TenGigabitEthernet0/9.1
vlan 10
nameif outside
security-level 10
ip address 18x.23x.23x.249 255.255.255.248 standby 18x.23x.23x.250
!
failover
failover lan unit secondary
failover lan interface LANFailover TenGigabitEthernet0/8.1
failover link StateFailover TenGigabitEthernet0/8.2
failover interface ip LANFailover 10.1.1.1 255.255.255.252 standby 10.1.1.2
failover interface ip StateFailover 10.1.2.1 255.255.255.252 standby 10.1.2.2
monitor-interface outside

欢迎光临 Chinaunix (http://bbs.chinaunix.net/)