Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

console access on PIX

Hi to everyone!

My problem is as follow. I have a pare of PIX 515 firewalls (active/standby) I have also one more unit with failover-only license. I tried to exemine this unit to work it as an standby unit instead of the previous one. After configuration from the working unit had been copied to the new unit, I can't gain any remote access to this secondary firewall, local console only. Before units were changed everything was OK. Configurations at pimary unit, ex-secondary unit and active unit are the same.

What should be the problem?


Hall of Fame Super Silver

Re: console access on PIX


Perhaps there is something in your situation that I am not yet understanding well. When you say the config was copied to the new unit, do you mean that literally the config was copied from one PIX to another PIX? That would produce duplicate IP addresses and would prevent remote access. It would also prevent remote access if the PIX to which the config was copied was connected in a subnet that did not match its IP address and mask.

If that is not the issue then perhaps you can provide a bit more detail about the situation.



New Member

Re: console access on PIX

No, it's not a network problem, I'm sure. New secondary unit has it's failover IP and is pinging well. Also, I noticed a message 'aaa server host machine not responding' on this new unit until I'v being connecting remotely. The aaa base is not empty, and the 'aaa authentication ssh console LOCAL' is issued, as vell as the 'ssh inside' statement.

New Member

Re: console access on PIX

Well, it seems, I fix a problem. Commonly VPN-accelerator card is dead, or is not present. At least in hardware config there no information about VAC.

Thanks to all