PIX Failover

[peter.gehrmann]

We have a PIX 515e failover bundle. In the documentation I read that the failover PIX will reboot very 12 hours min. Does this also occur in a "regular" failover design?

[gfullage]

This only occurs on the FO-licensed PIX, and only if it isn't connected to the UR licensed PIX. It's basically to stop people buying a cheaper FO PIX and putting it at a site by itself.

If the UR licensed PIX ever dies, the FO one will take over. As long as the UR PIX is still connected (even if it's powered off), then the FO PIX will run as normal with no disruption to service. You can then arrange a replacement for the UR PIX at your leisure.

[peter.gehrmann]

Thank for this reply. But sorry, I have forgotten, that we run a LAN based failover. We are not using the Cisco failover link cable. Is this statement also valid for the LAN based failover.

[gfullage · Accepted solution]

If the failover lan interface link status is up:

    * The FO-only PIX will boot and automatically become active if it fails to detect the primary UR PIX.

    * The unit will reload itself every following 24 hours, automatically becoming active each time.

If the failover lan interface link status is down:

    * The FO-only PIX will boot and come online but not become active.

    * The command failover active must be manually executed to make the unit active.

    * The unit will reload itself every following 24 hours, requiring another manual failover active to make it active each time.

This is precisely why we suggest to connect failover PIX's via a switch rather than a crossover cable.