04-ASA 高可用故障转移

noteId: F96265A797F14C749563EFC6A6697758 · 原始路径：/ALL/世赛题目（练习） - 笔记/考核/11月份考核（第一次考核）/广东第三届省赛 C模块 题目/C-模块/04-ASA 高可用故障转移.note

FW1：

failover lan unit primary failover lan interface folink GigabitEthernet0/3 //故障转移局域网接口failover link statelink GigabitEthernet0/4failover interface ip folink 172.31.255.0 255.255.255.254 standby 172.31.255.1 //故障转移接口ipint g0/3no shexitfailover interface ip statelink 172.31.255.2 255.255.255.254 standby 172.31.255.3int g0/4no shexitfailover replication http failover ipsec pre-shared-key Skills39! //故障转移 IPsec 预共享密钥failover# 接下来给接口配置 nameif，全部配置完成后：monitor-interface g0/1 g0/2monitor-interface [区域名] //当检测到设置的（区域/接口）故障后，则会进行故障转移

FW2:

failover lan unit secondary
failover lan interface folink GigabitEthernet0/3
failover link statelink GigabitEthernet0/4
failover interface ip folink 172.31.255.0 255.255.255.254 standby 172.31.255.1int g0/3no shexit
failover interface ip statelink 172.31.255.2 255.255.255.254 standby 172.31.255.3int g0/4no shexit
failover replication http

failover ipsec pre-shared-key Skills39!

failover