PIX LAN-Based Failover using crossover cable

[a.manosca]

Hi, anybody out there who could spare his/her time explaining, or probably

provide a link, why was it NOT recommended to use a crossover cable to

connect the two PIX firewalls for a LAN-Based Failover setup?

A summary of PROS and CONS is very much appreciated.

I'm not quite familiar with PIX firewalls so this question might be very easy

to the pros out there. Thanks in advance.

[reinke]

The LAN-based failover interface is tracked using keepalives. Therefore, the interface must have an ip address. If you are using a crossover cable and one pix fails, the link LED on both sides is switched off. But who failed???

- The own interface?

- The other PIX?

Therefore, there are no PROS and CONS: Do not use a crossover cable in conjunction with lan-based failover!

Edgar

[b-pelphrey]

Here is some additional information on Pix FO types.

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_guide_chapter09186a00800eb72f.html

Just a little more help in understanding some things. :)