Change the ip segment in "Failover ip state" could causes any problem?

Unanswered Question
Sep 1st, 2009

I have two firewall configured in fail over, in production, i need to change ip segment of ip state.

----------------------------------------------------

Model: PIX-515E

Version: pix7.2(4)

--------------------------------------

Conf:

interface Ethernet5

description STATE Failover Interface

failover

failover polltime unit msec 200 holdtime 1

failover replication http

failover link state Ethernet5

failover interface ip state 1.1.1.1 255.255.255.0 standby 1.1.1.2

if i execute the command

failover interface ip state 1.1.2.1 255.255.255.0 standby 1.1.2.2

i will have any problem ?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (1 ratings)
Loading.
Jon Marshall Tue, 09/01/2009 - 04:39

Maria

Depends what you mean by problem. Bear in mind that you will have to update the standby firewall as well with it's new IP ie. 1.1.2.2.

It will be fine but it should definitely be done out of production hours ie. a scheduled downtime.

Jon

Actions

This Discussion