Full Redundancy Pix Pair to Inside Switch Pair

[mmedwid]

Consider a scenario with redundant pix pair pixA and pixB (say 6.3x code) and internal switches sw1 and sw2. Fa0 of pixA is connected to port 3/1 or sw1 and fa0 of pixB is connected to port 3/1 of sw2. Assuming pixA is the primary and sw1 fails..is there a way for the pix pair to automagically failover to pixB? ie if carrier is lost on fa0 - fail to pixB. Thank-you.

[mmedwid]

I finally got around to labbing this out in our lab and I find that indeed the pix will fail when it loses carrier on one of its configured for failover interfaces. Another engineer from another group had been swearing that a pix pair had not failed over in this scenario hence the question here. In the lab it appeared to take about 30 seconds to failover to the standby pix. "Problem" resolved.

[haithamnofal]

Hi,

PIX FW will failover if one case out of many has occurred, one of them is interface failure on the primary PIX... In yuor scenario, if s.s. 1 failed, obviously the PIX interface connected to this switch will become down and as consequence the 2nd PIX will take over the primary role.

Best of luck.

Haitham