Installation guide

4-9
Cisco PIX Firewall Hardware Installation Guide
78-13880-01
Chapter 4 PIX 515/515E
Installing Failover
Step 5 If you are using Stateful Failover, use one of the following types of connections, that is appropriate for
your system, between the dedicated interfaces on the PIX Firewall units:
• Cat 5 crossover cable directly connecting the primary unit to the secondary unit.
• 100BaseTX half-duplex hub using straight Cat 5 cables.
• 100BaseTX full duplex on a dedicated switch or dedicated VLAN of a switch.
Figure 4-11 shows an example of a minimally configured PIX 515/515E with only the two interfaces
on the motherboard used for network traffic.
Figure 4-11 Failover Connections
Note All enabled interfaces must be connected between the active and standby units. Only
configure the active unit. On a PIX 515/515E, the active unit is indicated by the ACT LED
on the front of the unit.
Step 6 Use the power switch at the back of the units to power the primary unit on and then power the standby
unit on.
Within a few seconds, the active unit automatically downloads its configuration to the standby unit.
If the primary unit fails, the secondary unit automatically becomes active.
Inside
network
Internet
DO NOT INSTALL INTERFACE
CARDS WITH POWER APPLIED
CONSOLE10/100 ETHERNET 0
Link
FDX
FDX
100 Mbps
Link
100 Mbps
FAILOVER
10/100 ETHERNET 1
PIX-515
DO NOT INSTALL INTERFACE
CARDS WITH POWER APPLIED
CONSOLE10/100 ETHERNET 0
Link
FDX
FDX
100 Mbps
Link
100 Mbps
FAILOVER
10/100 ETHERNET 1
PIX-515
27883
PIX 515
Primary unit
Stateful Failover
dedicated interface
cable
Failover
serial cable
PIX 515
Standby unit
UPS
(not supplied)
Power
Inside switch
Outside switch