思科ASA部署Failover （Active/Standby）
时间： 13:10:20
&&&& 阅读：96
&&&& 评论：
&&&& 收藏：0
标签：&&&&&&&&& 思科ASA部署Failover（Active/Standby）&& & & &&Failover&&& & Failover是思科防火墙一种高可用技术，能在防火墙发生故障时数秒内转移配置到另一台设备，使网络保持畅通，达到设备级冗余的目的。&&&工作原理：&& & 两台设备型号一样（型号、内存、接口等），通过一条链路连接到对端（这个连接也叫心跳线）。该技术用到的两台设备分为Active设备（Primary）和Stanby设备（Secondary）,这种冗余也可以叫AS模式。活跃机器处于在线工作状态，备用处于待机状态实时监控活跃设备是否正常。当主用设备发生故障后（接口down，设备断电），备用设备可及时替换，替换为Avtive的角色。Failover启用后，Primary设备会同步配置文件文件到Secondary设备，这个时候也不能在Scondary添加配置，配置必须在Active进行。远程管理Failover设备时，登录的始终是active设备这一点一定要注意，可以通过命令（showfailover）查看当时所登录的物理机器。目前启用failover技术不是所有状态化信息都可以同步，比如NAT转换需要再次建立。&&拓扑如下：&实施配置：实现failover，两台设备需要满足以下的一些条件：1.相同的设备型号和硬件配置：设备模块、接口类型，接口数量，CPU，内存，flash闪存等2.相同的软件版本号，此处即指ASA的IOS版本，IOS版本需要高于7.03.相同的FW模式，必须同为路由模式或者透明模式4.相同的特性集，如支持的加密同为DES或者3DES5.合适的licensing，两台设备的license符合基本要求，能支持相同的failoverMaster-FW 设备配置：interfaceManagement0/0&management-only&shutdown&nameifmanagement&security-level100&ip address192.168.1.1 255.255.255.0&interfaceGigabitEthernet0/0&nameifoutside&security-level0&ip address209.165.201.2 255.255.255.0 standby 209.165.201.3&interface&GigabitEthernet0/1&nameifinside&security-level100&ip address192.168.2.1 255.255.255.0 standby 192.168.2.2&interfaceGigabitEthernet0/2&descriptionSTATE Failover Interface&interfaceGigabitEthernet0/3&descriptionLAN Failover Interface&&failover & //启动failover功能failover lan unitprimary &//定义本设备角色为主failover laninterface Lan GigabitEthernet0/3 &//定义failover通讯接口failover polltimeunit msec 200 holdtime 1 & & //每200毫秒发送一个存活消息，持续1秒failover polltimeinterface 3 holdtime 15 & & &//每3秒发送一个hello包，持续15秒failover key *****& & & & & & & & & & && & &//定义共享密钥相当于认证failover linkSTATE GigabitEthernet0/2 &&//定义failover通讯接口failover interfaceip Lan 172.16.1.1 255.255.255.0 standby 172.16.1.2 //定义主备通讯口ipfailover interfaceip STATE 172.16.2.1 255.255.255.0 standby 172.16.2.2 //定义主备通讯口ip&Backup-FW设备配置：failover & //启动failover功能failover lan unitsecondary &//定义本设备角色为备failover laninterface Lan GigabitEthernet0/3 &//定义failover通讯接口failover polltimeunit msec 200 holdtime 1 & & //每200毫秒发送一个存活消息，持续1秒failover polltimeinterface 3 holdtime 15 & & &//每3秒发送一个hello包，持续15秒failover key *****& & & & & & & & & & && & &//定义共享密钥相当于认证failover linkSTATE GigabitEthernet0/2 &&//定义failover通讯接口failover interfaceip Lan 172.16.1.1 255.255.255.0 standby&172.16.1.2//定义主备通讯口ipfailover interfaceip STATE 172.16.2.1 255.255.255.0 standby 172.16.2.2 //定义主备通讯口ip注意：主备配置完成后，重启备防火墙，主备配置进行同步（只需配置主机，数据将备拷贝至备机）&failover触发：l关于防火墙的检测对象（检测失败进行主备切换）查找资料思考良久，后来知晓，思科设备检测对象与山石、juniper不同，不需要人工配置干预，设备自动检测：l设备发生硬件失败或电源故障l设备出现软件失败l太多monitored接口fail&//可通过命令修改（failover interface-policy + 端口数/故障端口百分比）lno failover active 命令在active设备上强制执行或在standby设备输入failoveractive注意：failover触发无法取消某个接口（如：Mgt口），且不能在设备的上下联接口执行shutdown命令模拟故障（由于执行的命令会被同步至备设备，导致无法正常切换），只能通过拔插网线或硬件故障触发。&常用命令：showfailover state &//查看设备failover工作状态showmonitor-interface &//查看接口检测状态&&本文出自 “” 博客，转载请与作者联系！标签：
&&国之画&&&& &&&&chrome插件
版权所有 京ICP备号-2
迷上了代码！Electrician at Brite Electric | Profiles, Jobs, Skills, Articles, Salaries
| LinkedIn
Insights about Electrician - Brite Electric members on LinkedIn$60,000 / year$36,600$92,000Show prevBRITE ELECTRIC, INC. - 6All Brite Electric Inc - 4Brite Lite Electric Inc - 3Abbey Carpet and Floor - 1Paris Electric - 1General Motors - 1Raytheon Technical Services Company - 1University of Hartford - 1Con Edison - 1Costco Wholesale - 1Show nextBreakdown of top 10Show prevModesto Junior College - 4H?gskolen i Buskerud og Vestfold (HBV) - 2Medicine Hat College - 1University of Bridgeport - 1University of Hartford - 1Indiana University Southeast - 1Rose-Hulman Institute of Technology - 1University of Missouri-Saint Louis - 1University of Nebraska-Lincoln - 1Granite State College - 1Show nextBreakdown of top 10Show prevConstruction - 25Electrical & Electronic Manufacturing - 6Facilities Services - 2Wholesale - 2Non-profit Organization Management - 1Logistics & Supply Chain - 1Media Production - 1Mechanical Or Industrial Engineering - 1Retail - 1Restaurants - 1Show nextBreakdown of top 10Show prevUnited States - 43Greater New York City Area - 9Greater Boston Area - 5Canada - 4Louisville, Kentucky Area - 4Cleveland/Akron, Ohio Area - 3Johnson City, Tennessee Area - 3Greater Minneapolis-St. Paul Area - 3Malaysia - 1Kuala Lumpur, Malaysia - 1Show nextBreakdown of top 10Top SkillsElectrician profiles on LinkedInFind and connect to the top Electrician members on LinkedInLooking to hire?Get unbeatable access to Electrician candidates with LinkedIn Jobs.Company placeholder imageElectrician at Brite ElectricCompany placeholder imageElectrician at Brite ElectricPast experienceCompany placeholder imageElectrician Technician at MRL IndustriesCompany placeholder imageIndustrial Electrician at Eco 2 plasticsEducationModesto Junior CollegeSummaryTo obtain a position as an electrician where my skills could be fully utalized to add value and profit to your company .show aboveshow belowPerson placeholder imageCompany placeholder imageLead Electrician at Brite ElectricEducationCompany placeholder imageWhitewood High Schoolshow aboveshow belowPerson placeholder imageCompany placeholder imageElectrician at Brite Lite ElectricEducationNHTI, Concord's Community Collegeshow aboveshow belowCompany placeholder imageElectrician at Brite Electric CoEducationCompany placeholder imageTVCCshow aboveshow belowPerson placeholder imageCompany placeholder imageElectrician at All Brite ElectricEducationCuyahoga Valley Career Centershow aboveshow belowAre you a Electrician?Create a free profile to get recognized for what you doPerson placeholder imageCompany placeholder imageElectrician at Star-Brite Electricshow aboveshow belowPerson placeholder imageCompany placeholder imageelectrician at all brite electricshow aboveshow belowPerson placeholder imageCompany placeholder imageElectrician at Brite ElectricEducationCompany placeholder imageModesto Junior CollegeModesto Junior Collegeshow aboveshow belowPerson placeholder imageCompany placeholder imageElectrician at Best Brite ElectricCompany placeholder imageManaging Director at Best Brite Electric (m) Sdn BhdCompany placeholder imageChargeman , Wireman Nil at Best Brite Electric (M) Sdn BhdEducationCompany placeholder imageScondary show aboveshow belowPerson placeholder imageCompany placeholder imageMaster Electrician at All Brite Electric Incshow aboveshow belowPerson placeholder imageCompany placeholder imageJourneyman Electrician at Brite ElectricEducationCompany placeholder imageBullitt central high schoolshow aboveshow belowPerson placeholder imageCompany placeholder imageOwner at Brite House ElectricCompany placeholder imageElectrician at S&B ConstructionPast experienceElectrical O&M supervisor at FluorCompany placeholder imagemaster electrician at flour government groupSummary20+ years in the electrical construction business.show aboveshow belowCompany placeholder imagePresident at Brite Electric Inc.Past experienceCompany placeholder imageElectrician at Hill Internationalshow aboveshow belowPerson placeholder imageCompany placeholder imageforeman at all brite electricPast experienceelectrician at US NavyEducationPlatt Technical High Schoolshow aboveshow belowCompany placeholder imageElectrician at Bridge City ElectricPast experienceCompany placeholder imageElectrician at All-Brite ElectricCompany placeholder imageCreative Artist at Saskatoon StarPhoenixCompany placeholder imageGraphic Designer at Neighbourhood ExpressEducationCompany placeholder imageMedicine Hat Collegeshow aboveshow belowCompany placeholder imageBusiness Partner/Master Electrician at Fleet Electric CorpPast experienceCompany placeholder imageOwner Operator at Brite-Lite Electric IncCompany placeholder imageElectrician at LOCAL UNION NO. 3, IBEW, AFL-CIOEducationState University of New York Empire State CollegeSummaryMaster Electrician & Electrical Contractor with years of Field Knowledge, Experience and an Attention to Detail.
show aboveshow belowPerson placeholder imageCompany placeholder imageVP of Solar Operatioons at Paris Electric/ Sun-Brite SolarPast experienceCompany placeholder imageCrew Foreman at NRG Home SolarCompany placeholder imageSolar Electrician at Majestic Son & SonsCompany placeholder imageElectricians apprentice at Paris ElectricEducationCompany placeholder imageBellport High SchoolSummaryOBJECTIVE:
To be in a leadership role as an experienced leader in the installation, maintenance, repair of electrical systems, equipment...show aboveshow belowPerson placeholder imageCompany placeholder imageElectrician at All ElectricPast experienceCompany placeholder imageElectician at Banton Construction CoCompany placeholder imageElectrician at All Brite Electric IncCompany placeholder imageElectrician at Camsan, Inc. Electrical ContractorsCompany placeholder imageElectrician at All Brite Electric Incshow aboveshow belowPerson placeholder imagePlant Electrician at Universal Fibers IncPast experienceCompany placeholder imageElectrician at Brite ElectricCompany placeholder imageElectrician at HVAC Building SoultionsCompany placeholder imageElectrician at Southwest ElectricEducationCompany placeholder imageUniversity of Virginia's College at WiseCompany placeholder imageVirginia Highlands Community Collegeshow aboveshow belowCompany placeholder imageElectrician at HELM ELECTRICPast experienceCompany placeholder imageHVAC Building Controls at Wallace ElectricIndustrial Electrician at Canrig Drilling Technology Ltd.Company placeholder imageElectrical Inspector/Master Electrician at EXPCompany placeholder imageRefinery Electrician at Total ConstructionEducationCompany placeholder imageSaint Paul Technical CollegeCompany placeholder imageNational Joint ApprenticeshipSummaryI am a Minnesota and North Dakota Master Electrician with 17 years of experience in commercial, industrial, and oil & gas.
I have a wide...show aboveshow belowCompany placeholder imageJourneyman Wireman at Brite Lite Electric Co.Past experienceCompany placeholder imageJourneyman Wireman at Daley Electric LLCConstruction Superintendent at SOS International LLCCompany placeholder imageElectrical Supervisor at Dyncorp InternationalCompany placeholder imageElectrical Inspector at Dyncorp Intl (MBEC)EducationCompany placeholder imageLicensed Master ElectricianCompany placeholder imageLicensed Journeyman Electrician Company placeholder imageConstruction Electrician/Lineman Schoolshow aboveshow belowPerson placeholder imageCompany placeholder imageJourneyman electrician at Brite Lite ElectricalPast experienceCompany placeholder imageJourneyman electrician at Henderson ElectricCompany placeholder imageService electrician at RMH electricCompany placeholder imageApprentice, journeyman electrician at Brite lite electricalEducationCompany placeholder imageMadison parkshow aboveshow belowPerson placeholder imageJourneyman Electrician at Medina Electric, LLC.Past experienceCompany placeholder imageJourneyman Electrician at Brite Lite Electric IncJourneyman Electrician at Gephart ElectricJourneyman Electrician at Wallraff ElectricCompany placeholder imagePurchasing Manager at Larson
Electric/APi ElectricEducationCompany placeholder imageSaint Paul Technical Vocational InstituteCompany placeholder imageSouth Saint Paul High SchoolSummaryI have experience as a Journeyman Electrician, Purchasing Manager, Scheduler, Shop Manager, Service Manager, and Project Manager.
I am...show aboveshow belowElectical foreman at ASBECOPast experienceCompany placeholder imageElectrician at Goodfellas electricCompany placeholder imageElectrician at Road Dogs industrialCompany placeholder imageElectrician at Brite electricshow aboveshow belowCompany placeholder imageCEO at Chambers-Lane Electric IncCompany placeholder imageCeo at ChambersLane Electric Inc.Past experienceElectrical Foreman at Brite EnergyElectrical Foreman at Vivint SolarCompany placeholder imageOperations Manager at foothill solarElectrical Foreman at Verengo SolarEducationCompany placeholder imagemoreno valley high schoolSummaryWe are a full service residential, commercial and solar electrical contracting companyshow aboveshow belowShow moreShow lessLearn the skills to be a ElectricianLearn a new skill online, on your own time. Get started today with video instruction from recognized industry experts.Course by LyndaCourse by LyndaCourse by LyndaCourse by LyndaCourse by LyndaCourse by LyndaCourse by LyndaCourse by LyndaCourse by LyndaCourse by LyndaCourse by LyndaCourse by LyndaCourse by LyndaCourse by LyndaCourse by LyndaCourse by LyndaCourse by LyndaCourse by LyndaCourse by LyndaCourse by LyndaShow moreShow less后使用快捷导航没有帐号？
master蓝田玉
master蓝田玉(UID: )
邮箱状态未验证
视频认证未认证
注册时间 15:30
最后访问 20:53
上次活动时间 15:30上次发表时间 15:30所在时区使用系统默认
积分4经验3