A1:
| Answer: A failover event may be triggered by a loss of power, cable error, memory exhaustion, or an administrator forcing the standby. |
A2:
| Answer: The failover ip address if-name ip-address command assigns an IP address to the standby PIX Firewall. |
A3:
| Answer: Two PIX Firewall devices can be configured in a failover configuration. |
A4:
| Answer: The following are the disadvantages of LAN-based failover: - - The PIX Firewall takes longer to fail because it cannot immediately detect the loss of power of the standby unit. - The switch between the two units can be another point of hardware failure. - A separate interface is required for the failover link, which otherwise could have been used for normal traffic.
|
A5:
| Answer: The following is some information that is updated to the standby unit in a stateful failover configuration: TCP connection table; translation table (xlate); negotiated H.323 UDP ports; port allocation table bitmap for PAT; SIP; HTTP sessions; and MGCP UDP media connections. |
A6:
| Answer: The write standby command forces replication to the standby unit. |
A7:
| Answer: The failover lan interface interface-name command configures a LAN-based failover. |
A8:
| Answer: The default failover poll is 15 seconds. |
A9:
| Answer: No, the running configuration is only stored in memory on the active unit. When a "write memory" command issued on the active unit, configuration replication causes the changes to the current configuration to be saved on the standby unit. |
A10:
| Answer: Network and failover communication errors are detected within two consecutive polling intervals (by default, 15-second intervals). |
لطفا منتظر باشید ...
