[rancid] Re: Cisco Firewall Failover

Jason Lavoie jlavoie at bowdoin.edu
Wed Feb 7 16:40:14 UTC 2007


On Feb 7, 2007, at 9:40 AM, Shlomo Dubrowin wrote:
> When Cisco PIXs failover, they swap IP Addresses.
[...]
> Does anyone have a good solution on how to deal with this problem

You can list multiple hosts for each key in known_hosts, by separating
them with commas.  Something like:

fw-standy,fw-active,10.0.0.1,10.0.2 <host key 1>
fw-standy,fw-active,10.0.0.1,10.0.2 <host key 2>

This way, both hosts can use either key.

HTH,

-j

-- 
Jason Lavoie
jlavoie at bowdoin.edu





More information about the Rancid-discuss mailing list