535 Stateful Failover

[fliptop]

Im running a pair of 535's in a failover pairing, the main interfaces are GB-ethernet (0 and 1) but the failover interface is a standard ethernet connection - WILL THIS BE AN ISSUE FOR A STATEFUL FAILOVER ???

 

[yizhar]

HI.

It should be a 100mbit connection for the statefull failover.

I have no experience with such machines, but since the statefull failover only replicates the translation and connection tables and not the data itself, I guess that there will not be a problem.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[rubbaninja]

For stateful failover to work your second device must be a clone of the primary and be connected with the failover cable and all interfaces connected to each other.
You must have a dedicated 100baseTx Stateful Failover interface in addition to all other interfaces.

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_v53/config/advanced.htm#xtocid14

 

[Guest_imported]

Although, the Cisco doc only states that you MUST have a dedicated 100Tx interface for Stateful Failover, it is recommended by Cisco engineers to use a dedicated Gig interface for stateful failover if using Gig interfaces for the inside and outside on a Pix 535. This will prevent any chance that you will swamp the 100Tx interface trying to maintain state session info at Gigabit speeds.