I have tried adding an additional Ethernet card (PIX-4FE-66) on to the PIX 535 firewall cluster running software Version 7.0(4). Firewalls are running in active/standby failover mode through a dedicated LAN cable.

After shutting down and disconnecting the primary pix firewall from the network, we tried adding the card. The new card got detected, but we found that even the existing interfaces were not coming up. We tried inserting the card on to different slots, but we didn't succeed. Also we tried a different card as well.

As per Cisco documentation, the card was compatible with the hardware and we had supporting license on the firewall as well.

attaching the 'show int ip brief output' result when the card was inserted.

My concerns are,

1) Will the numbering of the interfaces change when we add a new interface card on to it. Will the existing numbers get assigned to the newly assigned interface?

2) Should we put the card on both the active and standby firewalls and bring up both the boxes at once.

3) Will there be any problem with the combination of cards put in the box.

Currently the slots in the firewall are populated in the following manner;

Slot 0: Empty

Slot 1: Empty

Slot 2: PIX-4FE-66

Slot 3: Empty

Slot 4: Empty

Slot 5: Empty

Slot 6: PIX-1FE

Slot 7: PIX-1FE

Slot 8: Empty

-------------------------------------

#sh in ip brief

Interface IP-Address OK? Method Status Protocol

Ethernet0 xxx.x.x.xx YES CONFIG down down

Ethernet1 xx.xx.xx.x YES CONFIG down down

Ethernet2 x.x.x.x YES CONFIG down down

Ethernet3 x.x.x.x YES CONFIG down down

Ethernet4 x.x.x.x YES CONFIG down down

Ethernet5 x.x.x.x YES CONFIG up up

Ethernet6 unassigned YES unset administratively down down

Ethernet7 unassigned YES unset administratively down down

Ethernet8 unassigned YES unset administratively down down

Ethernet9 unassigned YES unset administratively down down

:) Thanks in advance