I need to upgrade the memory on our PIX 515 active-standby failover pair in order to upgrade to 7.2.1...I am intending on:
Powering off standby
Power up standby, let it resync.
Fail primary so standby becomes active
Power down primary
Upgrade RAM in primary
Power up primary, force failover back (no preempt).
Does this sound sensible?
Also, I'm upgrading from 6.3 to 7.2.1 - does anyone know of a tool that you can run your config through to pick up potential issues? I've been through the guide and I think everything's going to be OK, but I've heard that you can also do this.
Your memory upgrade plan should be working fine as the same method can be applied to upgrade images for PIX in failover pair as well.
Within Cisco, there is a tool called Output Interpreter. But you need to have CCO login to access it. You can paste your running/startup config and see the recommendations. But not all of it (the recommendations) suite your environment, and yet, still a useful tool.
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...