Re: PIX stateful failover and crossover cables

["Kerry Thompson" <kez () crypt gen nz>]

mkrbeck () hushmail com said:
> I recall reading a detailed technical paper recently on the cisco
> site
> where it was recommended that pix stateful interface traffic always
> be passed thru a switch (as opposed to a x-over cable) between a
> pair of  pix chassis, regardless of whether the deployment is
> serial cable or LAN failover, however I cannot find it again, would
> anyone have a link for it or a copy ??

http://www.cisco.com/warp/public/110/failover.html

There is good reasoning behind this. If you have a crossover cable and one
end fails ( or it is disconnected ), then the other end will also see the
loss of carrier and conclude that it has an interface failure.

Kerry


-- 
Kerry Thompson, CCNA CISSP
Information Systems Security Consultant
http://www.crypt.gen.nz

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards