Other fact if the context in active failover-group provides the configuration for the corresponding context in standby failover-group I do not see the reason of creating stanby ip address for each interface exept for those used as failover interfaces.
for doing active/active failover using pix 8.0. But I have the impresion that the concept of stanby used on pix firewall is not the same as this used on cisco router.
i think that the command
ip address active_addr netmask standby standby_addr
does not means that standby_addr will be use as the gateway for a network but the ip address of the stanby unit.
If i do this on the failover interface I dont see the point of doing if for every interface or subinterface the contexts have?
Can someone explained that clearly?
You are correct in that the standby address is never used as the gateway for the clients. It is used for 2 reasons -
1) so you can connect to the standby firewall
2) so the firewalls can monitor each others state on those interfaces
You don't need to configure every interface with a standby address if you don't want to and sometimes you don't if you are using public IP addressing on the interfaces. If you are using private addressing i can't see any reason why you wouldn't use a standby address to be honest.
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...