Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

about pix failover

Hi,

I have two pix,version and interface as follow.when I implement failover(rs232 and crossover cable connected),there is some problem.when the secondary pix power up,the two pix state will changed frequency.

however,the pix connect to css11151(also configured to redundancy),does the css's "type redundancy-up" issue?

thanks and with regards.

Primary:

pixfirewall#show ver

Cisco PIX Firewall Version 6.2(2)

Cisco PIX Device Manager Version 2.1(1)

Compiled on Fri 07-Jun-02 17:49 by morlee

FW1 up 23 hours 6 mins

Hardware: PIX-525, 256 MB RAM, CPU Pentium III 600 MHz

Flash E28F128J3 @ 0x300, 16MB

BIOS Flash AM29F400B @ 0xfffd8000, 32KB

Encryption hardware device : IRE2141 with 2048KB, HW:1.0, CGXROM:1.9, FW:6.5

0: ethernet0: address is 000a.f479.aca2, irq 10

1: ethernet1: address is 000a.f479.aca3, irq 11

2: ethernet2: address is 0002.b3a0.0d09, irq 10

Licensed Features:

Failover: Enabled

VPN-DES: Enabled

VPN-3DES: Disabled

Maximum Interfaces: 8

Cut-through Proxy: Enabled

Guards: Enabled

URL-filtering: Enabled

Inside Hosts: Unlimited

Throughput: Unlimited

IKE peers: Unlimited

Secondary:

pixfirewall(config)# show version

Cisco PIX Firewall Version 6.2(2)

Compiled on Fri 07-Jun-02 17:49 by morlee

pixfirewall up 15 hours 11 mins

Hardware: PIX-525, 256 MB RAM, CPU Pentium III 600 MHz

Flash E28F128J3 @ 0x300, 16MB

BIOS Flash E28F400B5T @ 0xfffd8000, 32KB

0: ethernet0: address is 0004.c161.55b4, irq 10

1: ethernet1: address is 0004.c161.55b5, irq 11

2: ethernet2: address is 0002.b329.455d, irq 10

3: ethernet3: address is 0002.b329.44ad, irq 5

4: ethernet4: address is 00e0.b603.b8f3, irq 11

5: ethernet5: address is 00e0.b603.b8f2, irq 10

6: ethernet6: address is 00e0.b603.b8f1, irq 9

7: ethernet7: address is 00e0.b603.b8f0, irq 5

Licensed Features:

Failover: Enabled

VPN-DES: Enabled

VPN-3DES: Disabled

Maximum Interfaces: 8

Cut-through Proxy: Enabled

Guards: Enabled

URL-filtering: Enabled

Inside Hosts: Unlimited

Throughput: Unlimited

IKE peers: Unlimited

1 REPLY
Cisco Employee

Re: about pix failover

Failover PIX MUST run the same software and hardware, yours are different. Try removing the VAC from one and the extra ethernet ports from the other, then see how we go.

What does the syslog show as the reason for failing over? That'll be your best clue as to what's going on.

See http://www.cisco.com/warp/public/110/failover.html

83
Views
0
Helpful
1
Replies