PIX os version 6.3 - VLANs and Failover support

[n.grammatikas]

Dear all,

Reading the failover configuration prerequisites for PIX firewall, they suggest that when a Cisco switch is used, the trunking should be turned off on switch ports where the PIXs will be connected.

Instead, when vlans (logical interfaces) should be configured on a PIX, the trunking protocol 802.1q should be used. I have tried a long to find any more information or technical tip on CCO about that subject, but i cannot. I would great appreciate any information or idea about it.

Thanks.

[ovt]

They probably mean that configurations where VLAN is used for failover instead of (dedicated) physical link are not supported. Unfortunately it is unclear do they mean "stateful failover link" or "LAN-based failover link".

So, I can only reiterate to ALL:

Is it possible to use VLAN for stateful failover?

Is it possible to use VLAN for LAN-based failover?

Thanks in advance,

Oleg Tipisov,

REDCENTER,

Moscow