A office is using a pair of PIX 515E 6.3 (4) fail-over unit at one location. We plan to move them to a new location. My question here is if possible to move the unit with failover license first to the new location and unrestricted unit after. From my understanding about the Cisco failover, the all configuration have to be input from primary unit (with unrestricted license), in this case, standby unit (with fail-over license) will not take the new IP from new ISP. Any comments?
I would shutdown and move the primary unit to the new location. In that way you could configure it for the new IP on that location and when you move later the FO unnit it should configure itself smoothly with some minor manual changes.
The standby unit should work with the config of the primary unit and should not cause an interrruption of the services.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...