PIX-515E Failover setup

Answered Question
Apr 11th, 2010
User Badges:


I have 2 units of PIX 515E. Both have same software version, same number and type of interfaces, activation key type, flash memory and amount of RAM.

But the encryption hardware device is different.  One is having VAC+ (Crypto5823 revision 0x1) , the other one is having IRE2141 with 2048KB, HW:1.0, CGXROM:1.9, FW:6.5.

Can I setup failover with these 2 units?



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Jennifer Halim Mon, 04/12/2010 - 00:05
User Badges:
  • Cisco Employee,

What is the part# of the VAC card?

There are 2 VAC card available: PIX-VPN-ACCEL and PIX-VAC-PLUS, and they need to be the same to run PIX in failover.

chong.eric Mon, 04/12/2010 - 00:10
User Badges:

what is the command to check the VAC part#?   Do you mean I can't setup failover with these 2 units?



Jennifer Halim Mon, 04/12/2010 - 02:14
User Badges:
  • Cisco Employee,

Yes, seems like you have 1 VAC card and 1 VAC+ card.

"show crypto interface" will show you the actual card.

PIX-VPN-ACCEL is the VAC card

PIX-VAC-PLUS is the VAC+ card

And yes, you can not run failover between the PIX with the above different cards.


This Discussion