本文转自:http://blog.sina.com.cn/s/blog_a70750300101h5s0.html

拓扑 :这个拓扑比较的简单这里不需要解释:

pix1的完整配置:

interface Ethernet0
 description LAN Failover Interface
!
interface Ethernet1
 nameif inside
 security-level 100
 ip address 192.168.1.1 255.255.255.0 standby 192.168.1.2
!
interface Ethernet2
 nameif outside
 security-level 0
 ip address 192.168.2.1 255.255.255.0 standby 192.168.2.2
!
interface Ethernet3
 description STATE Failover Interface

failover lan unit primary
failover lan interface wangjie Ethernet0
failover key 123

failover link state Ethernet3
failover interface ip wangjie 192.168.100.1 255.255.255.0 standby 192.168.100.2
failover interface ip state 192.168.200.1 255.255.255.0 standby 192.168.200.2

failover lan enable
failover

pix2的配置:

failover lan unit secondary
failover lan interface wangjie Ethernet0
failover key 123

failover link state Ethernet3
failover interface ip wangjie 192.168.100.1 255.255.255.0 standby 192.168.100.2
failover interface ip state 192.168.200.1 255.255.255.0 standby 192.168.200.2

failover lan enable

failover

打开e0和e3

测试:

两边的基本情况,在这里看。

这个地址是自动配置的

在这里就表示测试成功了