Cisco PIX Failover configuration

[p.holley]

Hi,

I am new to pix and i am trying to configure failover using the serial cable.

My primary pix have the following config.

ip address outside 20.24.43.1 255.255.255.252

ip address inside 10.1.1.1 255.255.255.0

failover

failover timeout 0:00:00

failover poll 10

failover ip address outside 20.24.43.2

failover ip address inside 10.1.1.2

failover link inside

Do i just need the failover command on the secondary pix and then connect the serial cable with the correct end.

or

Do i need to configure failover on the secondary as well as outside and inside ip addresses before connecting the cable?

[Patrick Iseli]

Take a look at this whitepaper:

Using PIX Firewall Failover:

http://cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_guide_chapter09186a00800eb72f.html

You need to configure the the secondary PIX with the failover commands to get working the failover. The rest of the configuration will be synchronized as soon as the primary failover unit sees the socondary one.

Plug the failover cable in the right direction. There is anot on each plug if it is primary or secondary.

to sync the config use:

write standby

sincerely

Patrick