ASA5520双机配置案例(带状态statelink的双机配置AA模式带状态的多个statelink接口).doc

hostname asa-1 enable password cisco ! interface GigabitEthernet0/0 nameif inside security-level 100 ip address 49 92 standby 48 ! interface GigabitEthernet0/1 description LAN Failover Interface（做failover link的接口不需要做地址配置 ! interface GigabitEthernet0/2 description STATE Failover Interface ! interface GigabitEthernet0/3 nameif outside security-level 100 ip address 24 standby ! interface Management0/0 shutdown nameif management security-level 100 ip address management-only ! same-security-traffic permit inter-interface ! failover failover lan unit primary failover lan interface faillink（自己起的failover名字） GigabitEthernet0/1（心跳线接口） failover polltime unit 1 holdtime 3 failover link statelink GigabitEthernet0/2 failover interface ip faillink standby failover interface ip statelink standby monitor-interface outside monitor-interface inside icmp permit any inside icmp permit any outside route inside 2 24 50 1 route inside 4 92 50 1 route inside 28 92 50 1 route inside 92 92 50 1 route outside 1 telnet inside telnet outside ! hostname asa-2 enable password 2KFQnbNIdI.2KYOU encrypted passwd 2KFQnbNIdI.2KYOU encrypted names no dns-guard ! interface Ethernet0/0 nameif inside security-level 100 ip address 49 92 standby 48 ! interface Ethernet0/1 description LAN Failover Interface ! interface Ethernet0/2 description STATE Failover Interface shutdown ! interface Ethernet0/3 nameif outside security-level 100 ip address 24 standby ! interface Management0/0 nameif management security-level 100 ip address management-only ! no ftp mode passive clock timezone CST 8 same-security-traffic permit inter-interface pager lines 24 logging asdm informational mtu inside 1500 mtu outside 1500 mtu management 1500 failover failover lan unit primary failover lan interface faillink Ethernet0/1 failover polltime unit 1 holdtime 3 failover link statelink Ethernet0/2 failover interface ip faillink standby failover interface ip statelink standby i