两台Pix525的failover问题

yuhuohu

两台Pix525的扩展网卡槽位不同，起failover的话，是否能正常工作？

pix01 扩2块光口网卡 插上起1、2插槽，扩1块4口百M卡插上起第3插槽
pix01 扩2块光口网卡 插上起2、3插槽，扩1块4口百M卡插上起第1插槽

jordi

更正一下自己，LS说的对，附cisco说明：

Requirements
Hardware Requirement

The two units in a failover configuration must have the same hardware configuration. They must be the same model, have the same number and types of interfaces, and the same amount of RAM.

Note: The two units do not need to have the same size Flash memory. If you use units with different Flash memory sizes in your failover configuration, make sure the unit with the smaller Flash memory has enough space to accommodate the software image files and the configuration files. If it does not, configuration synchronization from the unit with the larger Flash memory to the unit with the smaller Flash memory fails.

Software Requirement

The two units in a failover configuration must be in the operational modes (routed or transparent, single or multiple context). They must have the same major (first number) and minor (second number) software version, but you can use different versions of the software within an upgrade process; for example, you can upgrade one unit from Version 7.0(1) to Version 7.0(2) and have failover remain active. We recommend that you upgrade both units to the same version to ensure long-term compatibility.

License Requirements

On the PIX security appliance platform, at least one of the units must have an unrestricted (UR) license.

jordi

Lan based failover 应该没有问题的，至少我没有看到过。：）

nanheyu

应该不可以。
按照CISCO官方的文档，两台设备的配置必须一样，同时，在做FAILOVER后，两台设备的配置文件也将变成一样的，因此，应该是不可以的，最好换成一样的接入方式

yuhuohu

谢谢jordi，也谢谢nanheyu

感谢CCTV,感谢党

wangjia316

2 楼的回答 好哦  学习了
They must be the same model have the same number and types of interfaces, and the same amount of RAM.