Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Reg: Virtual ip address on the firewall

Hi Guys,

Need to ask a question on pix. The following ip address is configured on the pix inside interface:

ip address 10.150.255.228 255.255.255.248 standby 10.150.255.229

The routing is configured as

route inside 10.0.0.0 255.0.0.0.0 10.150.255.227

The 10.150.255.227 looks hsrp address to me on the pix. Where can we configured this on the firewall and which command we can use to see this. Or is it assigned by the firewall automatically itself.

Tks

  • Firewalling
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: Reg: Virtual ip address on the firewall

10.150.255.227 is the next hop from the PIX inside interface. It is not an ip address on the PIX itself.

The PIX ip address is 10.150.255.228 for the inside Active ip address. There is no HSRP/standby ip address concept on PIX. The active ip address for inside interface is 10.150.255.228, and if the PIX fails over to the secondary failover pair, the ip address of 10.150.255.228 will also fail over. Whichever is the current Active firewall will have the ip address of 10.150.255.228 for the inside interface.

Hope that helps.

1 REPLY
Cisco Employee

Re: Reg: Virtual ip address on the firewall

10.150.255.227 is the next hop from the PIX inside interface. It is not an ip address on the PIX itself.

The PIX ip address is 10.150.255.228 for the inside Active ip address. There is no HSRP/standby ip address concept on PIX. The active ip address for inside interface is 10.150.255.228, and if the PIX fails over to the secondary failover pair, the ip address of 10.150.255.228 will also fail over. Whichever is the current Active firewall will have the ip address of 10.150.255.228 for the inside interface.

Hope that helps.

298
Views
0
Helpful
1
Replies