I've seen some stuff on Cisco, but it has only been for the 7500, 10000, and 12000 series routers. I haven't read too closely, but it may only be for failover for RPs within the same chassis. It also seems to require the 12.0(22)S code, I'm not sure where that train was rolled into the 12.1 or 12.2 trains.
Here is the only link I've seen so far that gives config commands: http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/120newft/120 limit/120s/120s22/sso120s.htm#xtocid29 ----- Original Message ----- From: "Howard C. Berkowitz" To: Sent: Thursday, November 21, 2002 4:29 PM Subject: Stateful NAT Failover [7:57857] > I've been hunting for specific technical documentation on stateful > failover between NAT instances in two routers, or even PIX. I can > find lots of marketing references in the description of the Cisco > GRIP architecture, and details of stateful IPsec failover. No > details of NAT failover. > > On assorted search engines (Cisco and non-Cisco), it keeps coming > back to stateful packet inspection, but not NAT per se. > > By stateful NAT failover, assume the following scenario: > > R1 is primary and R2 is backup. R1 knows its mappings from outside > address/port to inside address/port. It shares this information with > R2, which remains passive. Presumably, inside routers use HSRP to > find the active NAT, which is on the DMZ. HSRP on the DMZ can tell > the Internet access routers which NAT is active. > > Does anyone know where this is documented, or is it simply considered > a subset of stateful packet inspection at the implementation, not > marketing, level? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=57905&t=57857 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
