×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

Configuration Synchonization Question

Unanswered Question
Aug 21st, 2006
User Badges:

Hi There,


I have 2 PIX firewalls configured in Active-Passive mode and I have the following questions:


1- How frequnt does the Active PIX synch the configuration to the Passive PIX?


2- Whther I need to issue the "write memory" command on the secondary FW after config synch happens in order to save the config?


3- How frequent do 2 PIX firewalls synch the session table?


Thanks,

Haitham

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
mmorris11 Mon, 08/21/2006 - 11:08
User Badges:
  • Silver, 250 points or more

1- It does not maintain the configuration synchronization in this way. When the failover pair is first powered up, a synchronization occurs. Beyond that, commands entered on the primary unit are passed to the standby unit in real time. Subsequent "wr mem" commands on the primary unit are replicated to the standby unit thus saving the config on the standby unit. If for some reason you wish to write the config to the standby you can issue the "wr standby" command. This will not, however, save the config to nvram.


2 - No.


3 - I assume you are referring to stateful failover. This is done in real time else the failover could not be stateful.


HTH pls rate!

Actions

This Discussion