Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
New Member

Pix Failover Mechanism for VLANS


I've recently tried to configure failover for a Pix515 with VLAN's on one of the interfaces.

After configuring the failover details for the VLAN'd interfaces, and I enable failover on the Pix, it shows the other physical interfaces (after a while of waiting) reaching their Normal status. However the issue starts with the interface which contains the VLAN'd interfaces. It shows the physical interface as Normal (Waiting) and the VLAN'd interfaces are showing Normal (Waiting) as well.

Now here's the problem, the VLAN interfaces as well as the physical interface where the VLAN sits never reaches the Normal state.

Looking at "show arp" output, I can see MAC addresses for each of the Pix's and I can ping the VLAN'd interfaces from both Pix's and in both directions. I can also ping IP addresses in each of the VLAN's respectively without any problems and traffic is flowing from the VLAN's through the Pix to the other devices sitting off the physical interfaces.

The Pix's are using cable-based failover and are running version 6.3(5) and the primary is running an unrestricted license with the secondary having a failover license. The maximum number of interfaces as not been reached.

Any ideas as to what I'm doing wrong?




Re: Pix Failover Mechanism for VLANS

The use of a pair of identical PIX devices (model, memory, network interface cards (NICs), operating system versions), high availability can be provided with no operator intervention.

CreatePlease to create content