Non-disruptive PWD recovery - PIX HA

Answered Question

My customer has a PIX 515 HA, version unknwon.  We need to do password recovery.  Am I right in saying that the following sequence will work?


Reboot standby, determine SW version from console

Verify standby is operational after reboot

Download correct utility

Perform recovery procedure on the active box

Once active box is recovered, verify config sync to standby


If I understand PIX HA correctly, I think the standby box should take over during the recovery procedure.  Am I missing anything?


Many thanks

Correct Answer by John Blakley about 6 years 11 months ago

I would fail it over manually before doing the recovery to make sure the standby comes online as active and you can verify it. Otherwise, I don't see a problem with the logic.....


HTH,

John

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
John Blakley Wed, 05/26/2010 - 09:08
User Badges:
  • Purple, 4500 points or more

I would fail it over manually before doing the recovery to make sure the standby comes online as active and you can verify it. Otherwise, I don't see a problem with the logic.....


HTH,

John

Actions

This Discussion