Failover pix become the permanent active?

[carlos.hernandez]

After the Primary failed the Standby has become the Active running over a month with new changes. Can the Standby force "write standby" to the old Primary pix before making the old Primary the Active?

[carlos.hernandez]

if the above can't be done does anyone know how much time the Standby with FO license is allowed to run before bring up the Primary with UR license online and making it the Active?

Carlos

[ethiel]

You can write standby to push the config to the "primary" that is currently standby. The following link confirms this:

http://www.ciscotaccc.com/kaidara-advisor/security/showcase?case=K15656661

As it mentions, the main gotcha is you need to configure failover first on the replacement unit (makes sense).

- Eric

[carlos.hernandez]

that is precisely what I was wondering. Thanks for confirming the process. The key thing is that the replication does not occur automatically when preempt is not configured.

thanks very much for your response.

regards,

carlos

[ethiel]

Actually, to slightly revise my post, the link at the bottom of that page points out that if the new PIX is booted with the failover cable already connected, it will receive the config from the already running one. This is good in your situation, but bad if you have config on the new one that you want to keep.

-Eric

Please remember to rate all helpful posts.