Solved: SNMP Polling of FWSM Passive Mate

bradleyordner · ‎03-18-2010

Hi,

We have two 6513's with a FWSM in each. They are currently in Active Passive Mode so they share the same config. Is there anyway to poll the passive mate via SNMP for Serial number etc?

Thanks

Jennifer Halim · ‎03-18-2010

There should be different ip address assigned to the standby fwsm.

If you do: "sh run interface", from the output, you should see 2 ip addresses per interface. The second ip address would be the one assigned to the standby fwsm.

For example:

interface vlan 10

ip address 1.1.1.1 255.255.255.0 standby 1.1.1.2

In the above case, 1.1.1.2 is the standby ip address.

View solution in original post

Jennifer Halim · ‎03-18-2010

The standby FWSM normally has ip address as well. You should be able to poll the standby FWSM if you can poll the active FWSM for the same information.

bradleyordner · ‎03-18-2010

Hi,

Thanks for the reply. The standby shares the same outside address that we use for polling on the active unit?

Brad

Jennifer Halim · ‎03-18-2010

There should be different ip address assigned to the standby fwsm.

If you do: "sh run interface", from the output, you should see 2 ip addresses per interface. The second ip address would be the one assigned to the standby fwsm.

For example:

interface vlan 10

ip address 1.1.1.1 255.255.255.0 standby 1.1.1.2

In the above case, 1.1.1.2 is the standby ip address.

bradleyordner · ‎03-18-2010

ok so i will have to break the failover config first and apply -

Active Unit - 10.0.0.101 255.255.255.0 standby 10.0.0.100

Standby Unit - 10.0.0.102. 255.255.255.0 standby 10.0.0.100

Is the standby like a virtual interface?

Thanks

Brad

Jennifer Halim · ‎03-18-2010

No, no..

For FWSM failover Active/Standby configuration, there will only be 2 ip addresses per interface, 1 active ip address and 1 standby ip address.

Configuration just needs to be configured on the active fwsm, and it will be automatically replicated to the standby fwsm if failover is configured.

Here is the failover documentation on FWSM for your reference:

http://www.cisco.com/en/US/docs/security/fwsm/fwsm32/configuration/guide/fail_f.html

bradleyordner · ‎03-18-2010

ah yes i just got it after reading a second time ha ha.

Thanks for your help looks good now.

Brad

Jennifer Halim · ‎03-18-2010

Cheers. Thanks for your update.