pix 7.2 failover

Unanswered Question
Aug 25th, 2009

Customer secondary pix failed. Replaced secondary pix. Using serial failover. units replicated secondary pix has config actually failed over to secondary and worked. 5 days later configuration on secondary is gone. Did not reboot either pix.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
smahbub Mon, 08/31/2009 - 10:47

When the replication starts, the security appliance console on the active unit displays the message "Beginning configuration replication: Sending to mate," and, when it is complete, the security appliance displays the message "End Configuration Replication to mate." Within replication, commands entered on the active unit cannot replicate properly to the standby unit, and commands entered on the standby unit can be overwritten by the configuration that is replicated from the active unit. Do not enter commands on either unit in the failover pair within the configuration replication process. Dependent upon the size of the configuration, replication can take from a few seconds to several minutes.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807dac5f.shtml#devi

Actions

This Discussion