04-01-2003 09:24 AM - edited 02-20-2020 10:39 PM
Hi,
I have two pix,version and interface as follow.when I implement failover(rs232 and crossover cable connected),there is some problem.when the secondary pix power up,the two pix state will changed frequency.
however,the pix connect to css11151(also configured to redundancy),does the css's "type redundancy-up" issue?
thanks and with regards.
Primary:
pixfirewall#show ver
Cisco PIX Firewall Version 6.2(2)
Cisco PIX Device Manager Version 2.1(1)
Compiled on Fri 07-Jun-02 17:49 by morlee
FW1 up 23 hours 6 mins
Hardware: PIX-525, 256 MB RAM, CPU Pentium III 600 MHz
Flash E28F128J3 @ 0x300, 16MB
BIOS Flash AM29F400B @ 0xfffd8000, 32KB
Encryption hardware device : IRE2141 with 2048KB, HW:1.0, CGXROM:1.9, FW:6.5
0: ethernet0: address is 000a.f479.aca2, irq 10
1: ethernet1: address is 000a.f479.aca3, irq 11
2: ethernet2: address is 0002.b3a0.0d09, irq 10
Licensed Features:
Failover: Enabled
VPN-DES: Enabled
VPN-3DES: Disabled
Maximum Interfaces: 8
Cut-through Proxy: Enabled
Guards: Enabled
URL-filtering: Enabled
Inside Hosts: Unlimited
Throughput: Unlimited
IKE peers: Unlimited
Secondary:
pixfirewall(config)# show version
Cisco PIX Firewall Version 6.2(2)
Compiled on Fri 07-Jun-02 17:49 by morlee
pixfirewall up 15 hours 11 mins
Hardware: PIX-525, 256 MB RAM, CPU Pentium III 600 MHz
Flash E28F128J3 @ 0x300, 16MB
BIOS Flash E28F400B5T @ 0xfffd8000, 32KB
0: ethernet0: address is 0004.c161.55b4, irq 10
1: ethernet1: address is 0004.c161.55b5, irq 11
2: ethernet2: address is 0002.b329.455d, irq 10
3: ethernet3: address is 0002.b329.44ad, irq 5
4: ethernet4: address is 00e0.b603.b8f3, irq 11
5: ethernet5: address is 00e0.b603.b8f2, irq 10
6: ethernet6: address is 00e0.b603.b8f1, irq 9
7: ethernet7: address is 00e0.b603.b8f0, irq 5
Licensed Features:
Failover: Enabled
VPN-DES: Enabled
VPN-3DES: Disabled
Maximum Interfaces: 8
Cut-through Proxy: Enabled
Guards: Enabled
URL-filtering: Enabled
Inside Hosts: Unlimited
Throughput: Unlimited
IKE peers: Unlimited
04-01-2003 05:22 PM
Failover PIX MUST run the same software and hardware, yours are different. Try removing the VAC from one and the extra ethernet ports from the other, then see how we go.
What does the syslog show as the reason for failing over? That'll be your best clue as to what's going on.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide