3845 Failover

[flatliner]

I have x2 3845 routers configured with HSRP, and have now installed the IOS security feature set on these routers, and have a couple of questionn that one of u guys may know the answers to.

1. Is there a way of keeping the rules in sync on both router/firewalls?

2. Can I leave HSRP in place, or do I need to configure firewall failover instead?

Basically, I need to have a redundant pair of firewall/routers, which only need the rule base changed on one, and it will sync to the other.

Is this possible, or do I have to do doulble the admin.

 

[lgarner]

I don't think any of the IOS-based products will do that. The Pix will.

 

[flatliner]

thanks for replying.

ASA appliances do, you just need to make sure you configure the active fw/rtr, and config will be syncd when you write config.