Hello,
I have two PIX515 firewalls. One has a UR license and one has an FO license. I am not using LAN-based Stateful Failover and running 7.0(2) software.
My problem is that the failover doesn't seem to be working properly. I appear to be able to failover to the secondary unit fine, but if I do anything at all to the primary unit (which is in Standby according to 'show failover' output), I can no longer pass traffic on the Secondary (now primary) unit.
For instance - if I simply unplug either of the ethernet interfaces on the Primary, I can no longer ping the default gateway on the inside interface and thus cannot pass traffic through the Active firewall. If I turn off the Primary, I cannot pass traffic through the Active firewall. If I disable failover entirely and disconnect the serial cable, I still cannot do anything to the Primary, or I end up losing connectivity.
From what I can see, everything is configured properly and there's not really any complicated options to set when configuring failover. The failover config is below:
failover
failover polltime unit 1 holdtime 3
failover polltime interface 3
!
interface Ethernet0
speed 100
duplex full
nameif outside
security-level 0
ip address 192.168.1.10 255.255.255.240 standby 192.168.1.11
!
interface Ethernet1
speed 100
duplex full
nameif inside
security-level 100
ip address 10.200.0.1 255.255.255.248 standby 10.200.0.2
Is there something I'm missing?
