| 13.3 |  | LAN-Based Failover |
| 13.3.2 |  | Steps 1 – 4: preparing the primary PIX Security Appliance |

| This section will provide an overview of Steps 1 through 4 of configuring the PIX Security Appliance to support LAN-based failover. These steps focus primarily on preparing the primary PIX Security Appliance. The remaining five steps through 10, which focus on readying the secondary PIX Security Appliance for LAN-based failover, will be discussed in the following section.

To configure LAN-based failover, complete the following steps:

1. Perform the following on any switch that connects to the PIX Security Appliance :
   - Enable portfast.
   - Turn off trunking.
   - Turn off channeling.
   - Ensure the Multilayer Switch Feature Card (MSFC) is not running a deferred Cisco IOS software version.
2. Attach a network cable between the primary and secondary firewalls for each network interface, except for the interface to be used for LAN-based failover. If the failover cable is connected to the PIX Security Appliance, disconnect it .
3. To prepare the primary PIX Security Appliance, complete the steps listed in Figures and .
4. Save the primary PIX configuration to Flash memory.

Notice that the initial commands are very similar to the commands used to enable serial cable failover on the PIX Security Appliance, but that later failover LAN commands are new. The command reference illustrates the new failover LAN commands and their various arguments. The corresponding demonstration activity associated with this module also looks at the configuration of the primary PIX Security Appliance for LAN-based failover in greater detail.

| Media Activity Demonstration Activity: Configuring the Primary PIX Security Appliance to Support LAN-Based Failover In this activity, students will learn about configuring the primary PIX Security Appliance to support LAN-based failover.