Solved: PIX-515E Failover setup

chong.eric · ‎04-11-2010

Hi,

I have 2 units of PIX 515E. Both have same software version, same number and type of interfaces, activation key type, flash memory and amount of RAM.

But the encryption hardware device is different. One is having VAC+ (Crypto5823 revision 0x1) , the other one is having IRE2141 with 2048KB, HW:1.0, CGXROM:1.9, FW:6.5.

Can I setup failover with these 2 units?

Regards

Eric

Jennifer Halim · ‎04-12-2010

Those VAC cards are EOL:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5708/ps5709/ps2030/end_of_life_notice_for_cisco_pix_sec_app_cards_and_hwacc.html

PIX515E is also EOL:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5708/ps5709/ps2030/end_of_life_notice_for_the_Cisco_PIX_515E_Security_Appliance.html

You might consider getting ASA firewalls.

View solution in original post

Jennifer Halim · ‎04-12-2010

What is the part# of the VAC card?

There are 2 VAC card available: PIX-VPN-ACCEL and PIX-VAC-PLUS, and they need to be the same to run PIX in failover.

chong.eric · ‎04-12-2010

what is the command to check the VAC part#? Do you mean I can't setup failover with these 2 units?

Regards,

Eric

Jennifer Halim · ‎04-12-2010

Yes, seems like you have 1 VAC card and 1 VAC+ card.

"show crypto interface" will show you the actual card.

PIX-VPN-ACCEL is the VAC card

PIX-VAC-PLUS is the VAC+ card

And yes, you can not run failover between the PIX with the above different cards.

chong.eric · ‎04-12-2010

Can I upgrade the PIX-VPN-ACCEL to PIX-VAC-PLUS?

Jennifer Halim · ‎04-12-2010

Those VAC cards are EOL:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5708/ps5709/ps2030/end_of_life_notice_for_cisco_pix_sec_app_cards_and_hwacc.html

PIX515E is also EOL:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5708/ps5709/ps2030/end_of_life_notice_for_the_Cisco_PIX_515E_Security_Appliance.html

You might consider getting ASA firewalls.

chong.eric · ‎04-12-2010

thank you