建站
咨詢
售后
建站咨詢
新聞中心
Cisco ASA FW replacement Active sand Standby Mode
思科防火墻 更換
must make sure the cross connection is there.
- must have written connection for DC to check
- must make sure the lincense is there show verion
- Must have a roll back plane.
- Must communication effectively with DC guys.
show X
Show arp
show ×××-session L2l
sh run nat
Primary A
Gi1/1 to Switch
Gi1/2 to Switch
GI1/8 to Sec B Gi1/8 ( cross connect)
Secondary B
New Primay C
New Secondary D
Step 1.
Move all the connection from B to New Secondary D ( include cross connect)
Step 2.
Failover over the Active to New Secondary D ( in new D failover active)
show failvoer state
Step 3.
Move all the connection from A to new C.
Show failvoer state
Step 3.
Move the Active FW to new C. ( in C failvoer active)
show xlate
show arp
ping host to see if its live
show -session-l2l to check tunnel status.
因?yàn)楦鷵Q的時(shí)候是一臺(tái)一臺(tái)更換的。
導(dǎo)致我在更換的時(shí)候，
比如 Old Primary 和 New Sec D 的時(shí)候， 怎么也不工作， 原來他們之間的
Failover Link 沒有連起來
Suppose
Old Primary Failvoer link to New Sec D Failover link.
現(xiàn)實(shí)連的是
New Priamary C Failover link to New Sec D failover link.
Note: cross connect = Failvoer link.
是主防火墻 和備用防火墻之間的通信連接
另外有需要云服務(wù)器可以了解下創(chuàng)新互聯(lián)scvps.cn，海內(nèi)外云服務(wù)器15元起步，三天無理由+7*72小時(shí)售后在線，公司持有idc許可證，提供“云服務(wù)器、裸金屬服務(wù)器、高防服務(wù)器、香港服務(wù)器、美國服務(wù)器、虛擬主機(jī)、免備案服務(wù)器”等云主機(jī)租用服務(wù)以及企業(yè)上云的綜合解決方案，具有“安全穩(wěn)定、簡單易用、服務(wù)可用性高、性價(jià)比高”等特點(diǎn)與優(yōu)勢，專為企業(yè)上云打造定制，能夠滿足用戶豐富、多元化的應(yīng)用場景需求。
新聞名稱：CiscoASAfirewallswap-創(chuàng)新互聯(lián)
地址分享：http://www.dlmjj.cn/article/copppj.html
