3550emi + pix 双网卡 hsrp 配置实例

interface FastEthernet0/23
no switchport
ip address 3.3.3.4 255.255.255.0
!
interface Vlan1
ip address 10.195.9.2 255.255.255.0
no ip redirects
standby delay minimum 5 reload 200
standby priority 110
standby preempt
standby 100 ip 10.195.9.1
!
ip route 0.0.0.0 0.0.0.0 3.3.3.3



!
interface FastEthernet0/23
no switchport
ip address 2.2.2.3 255.255.255.0
!
interface Vlan1
ip address 10.195.9.3 255.255.255.0
no ip redirects
standby delay minimum 5 reload 200
standby priority 100
standby preempt
standby 100 ip 10.195.9.1
!
ip route 0.0.0.0 0.0.0.0 2.2.2.2
ip route 0.0.0.0 0.0.0.0 10.195.9.2 200 permanent


ip address outside 5.5.5.5 255.255.255.0
ip address inside 2.2.2.2 255.255.255.0
ip address intf2 3.3.3.3 255.255.255.0
global (outside) 1 5.5.5.7
nat (outside) 0 0.0.0.0 0.0.0.0 0 0
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
nat (intf2) 0 0.0.0.0 0.0.0.0 0 0
conduit permit ip any any
conduit permit icmp any any
route outside 0.0.0.0 0.0.0.0 5.5.5.6 1
route inside 10.195.9.0 255.255.255.0 2.2.2.3 1
route intf2 10.195.9.0 255.255.255.0 3.3.3.4 3


其中注意的是：
1：pix上不支持浮动路由，备份交换机路由要采用metric值 〉2
2：在主交换上加一条浮动路由指向备份交换机
3：两台交换机之间必须用线连接

这样可以防止某些端口出问题而造成网络瘫痪，当上联口也采用hsrp同样要注意路由问题，考虑到端口出问题的现象