Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

PIX Active/Standby Cable Failover with zero downtime?

Chaps,

We have a pair of 515e's with cable based failover running 8.0(2).

Apparently in the past when one of the PIX's was turned off the failover was almost instant, recently it's taken about 30 secs.  Any idea what could be wrong.

'show xlate' on the stanbdby shows that it's getting stateful connections.

There have been no significant changes to the or upgrades, just new a few new servers/services added.

Any help appreciated,

Jim

Everyone's tags (7)
5 REPLIES
Super Bronze

Re: PIX Active/Standby Cable Failover with zero downtime?

Here is the default failover timeout on PIX:

- unit failover: poll time: 15 seconds with hold time of 45 seconds:

http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/ef.html#wp1928426

- interface failover: poll time: 5 seconds with hold time 5 times the poll time: 25 seconds --> which is approximately 30 seconds:

http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/ef.html#wp1928586

New Member

Re: PIX Active/Standby Cable Failover with zero downtime?

Hi,

Does it still need to poll when the serial cable detects the other unit is powered off?

Jim

Super Bronze

Re: PIX Active/Standby Cable Failover with zero downtime?

You are right. No, if it detects that the other unit is powered off, it should automatically fail over. Maybe the serial cable is faulty.

New Member

Re: PIX Active/Standby Cable Failover with zero downtime?

I had a debug running on the secondary and I saw a lot of activty when the active was switched off so I think the cable is fine.

Any other ideas?

Super Bronze

Re: PIX Active/Standby Cable Failover with zero downtime?

Can you share the debug output on secondary?

655
Views
0
Helpful
5
Replies