SNMP Polling of FWSM Passive Mate

Answered Question
Mar 18th, 2010

Hi,

We have two 6513's with a FWSM in each. They are currently in Active Passive Mode so they share the same config. Is there anyway to poll the passive mate via SNMP for Serial number etc?

Thanks

I have this problem too.
0 votes
Correct Answer by Jennifer Halim about 6 years 8 months ago

There should be different ip address assigned to the standby fwsm.

If you do: "sh run interface", from the output, you should see 2 ip addresses per interface. The second ip address would be the one assigned to the standby fwsm.

For example:

interface vlan 10

   ip address 1.1.1.1 255.255.255.0 standby 1.1.1.2

In the above case, 1.1.1.2 is the standby ip address.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Jennifer Halim Thu, 03/18/2010 - 20:40

The standby FWSM normally has ip address as well. You should be able to poll the standby FWSM if you can poll the active FWSM for the same information.

bradleyordner Thu, 03/18/2010 - 20:54

Hi,

Thanks for the reply. The standby shares the same outside address that we use for polling on the active unit?

Brad

Correct Answer
Jennifer Halim Thu, 03/18/2010 - 21:34

There should be different ip address assigned to the standby fwsm.

If you do: "sh run interface", from the output, you should see 2 ip addresses per interface. The second ip address would be the one assigned to the standby fwsm.

For example:

interface vlan 10

   ip address 1.1.1.1 255.255.255.0 standby 1.1.1.2

In the above case, 1.1.1.2 is the standby ip address.

bradleyordner Thu, 03/18/2010 - 21:55

ok so i will have to break the failover config first and apply -

Active Unit - 10.0.0.101 255.255.255.0 standby 10.0.0.100

Standby Unit - 10.0.0.102. 255.255.255.0 standby 10.0.0.100

Is the standby like a virtual interface?

Thanks

Brad

Jennifer Halim Thu, 03/18/2010 - 21:59

No, no..

For FWSM failover Active/Standby configuration, there will only be 2 ip addresses per interface, 1 active ip address and 1 standby ip address.

Configuration just needs to be configured on the active fwsm, and it will be automatically replicated to the standby fwsm if failover is configured.

Here is the failover documentation on FWSM for your reference:

http://www.cisco.com/en/US/docs/security/fwsm/fwsm32/configuration/guide/fail_f.html

bradleyordner Thu, 03/18/2010 - 22:06

ah yes i just got it after reading a second time ha ha.

Thanks for your help looks good now.

Brad

Actions

This Discussion