515 FO

[timtron]

I have 2 515's setup in a stateful failover config. I have dedicated interfaces connected with a crossover cable used for the stateful interface. However my outside interfaces keep trying to exchange ?hello? packets and it is triggering the PIX-IDS as spoofed IP addresses. Is this the normal behavior for them to exchange packets on the non-failover link?

[smalkeric]

Yes. The Hello packets (or lack of them) is the triggering mechanism for failover. I can see how IDS may not like that though. You might talk to Cisco about that.