Re: PIX failover problem [7:56199]
Hi Vamsi, If you are using a cross over cable for state ful failover, make sure the interface speeds and duplex are matched on both PIXs. Do not leave them to autonegotiate. Such conditions usually occur, when the secondary unit is unable to detect the primary unit and therefore assumes itself to be active. You can check it by show failover command. Make sure that both PIX can see each other. regards, Nadeem. Vamsi Krishna wrote in message news:200210251610.QAA06470;groupstudy.com... Hi Mike, Have you tried rebooting the Secondary PIX and check if the primary is active and after the rebooted pix comesup ? What is OS version of your PIX ? Vamsi - Original Message - From: mike Dang To: Sent: Friday, October 25, 2002 1:02 PM Subject: Re: PIX failover problem [7:56199] Vamsi, I used the cable provided by Cisco to connect 2 525s through the failover ports and it's been working fine. Even though I don't know the answer but I don't think it's a good idea to connect 2 pixes through a switch. Good luck. Vamsi Krishna wrote:Hi Pat, I have got the correct configuration as mentioned in Cisco. I too think the primary PIX fails as the failover link goes into failed state as the secondary is down and secondary PIX will become active as the primary is in failed state. Has anyone faced this problem ? What is the normal practice of connecting PIX in failover configuration ? through cross over cable or through a separate switch ? Pls reply. Regards, Vamsi - Original Message - From: Patrick Donlon To: Sent: Thursday, October 24, 2002 4:11 PM Subject: Re: PIX failover problem [7:56199] I think you've got your config correct, when any of the interfaces go down on the active PIX it will switch into standby. So when you reboot the standby it will cause this to happen, the documentation does say you should use a separate switch for the failover NICs which should prevent this, http://www.cisco.com/warp/customer/110/failover.html . Do you use a failover cable as well, I would have thought the primary would prevent the failover but I'm not 100 percent sure. Cheers Pat Vamsi Krishna wrote in message news:200210241235.MAA05012;groupstudy.com... Hi, We are facing a strange problem with PIX failover. We have two PIX = 525 (OS 6.0.1) in failover configuration. When the standby PIX is = rebooted for maintenance reasons, it came up and became the Active PIX = (which should not happen). The active PIX showed stateful failover link = failed and so the PIX was in failed state. Both the PIX are connected = through a stateful failover link (100Mbps) using a Crossover cable.=20 Is it a problem because both the PIX are connected using a crossover = cable? Is it recommended to connect through a switch? Has anyone faced a = similar problem? Regards, Vamsi **Disclaimer Information contained in this E-MAIL being proprietary to Wipro Limited is 'privileged' and 'confidential' and intended for use only by the individual or entity to which it is addressed. You are notified that any use, copying or dissemination of the information contained in the E-MAIL in any manner whatsoever is strictly prohibited. *** **Disclaimer Information contained in this E-MAIL being proprietary to Wipro Limited is 'privileged' and 'confidential' and intended for use only by the individual or entity to which it is addressed. You are notified that any use, copying or dissemination of the information contained in the E-MAIL in any manner whatsoever is strictly prohibited. *** Do you Yahoo!? Y! Web Hosting - Let the expert host your web site **Disclaimer Information contained in this E-MAIL being proprietary to Wipro Limited is 'privileged' and 'confidential' and intended for use only by the individual or entity to which it is addressed. You are notified that any use, copying or dissemination of the information contained in the E-MAIL in any manner whatsoever is strictly prohibited. *** Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=56504t=56199 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: PIX failover problem [7:56199]
Vamsi, I used the cable provided by Cisco to connect 2 525s through the failover ports and it's been working fine. Even though I don't know the answer but I don't think it's a good idea to connect 2 pixes through a switch. Good luck. Vamsi Krishna wrote:Hi Pat, I have got the correct configuration as mentioned in Cisco. I too think the primary PIX fails as the failover link goes into failed state as the secondary is down and secondary PIX will become active as the primary is in failed state. Has anyone faced this problem ? What is the normal practice of connecting PIX in failover configuration ? through cross over cable or through a separate switch ? Pls reply. Regards, Vamsi - Original Message - From: Patrick Donlon To: Sent: Thursday, October 24, 2002 4:11 PM Subject: Re: PIX failover problem [7:56199] I think you've got your config correct, when any of the interfaces go down on the active PIX it will switch into standby. So when you reboot the standby it will cause this to happen, the documentation does say you should use a separate switch for the failover NICs which should prevent this, http://www.cisco.com/warp/customer/110/failover.html . Do you use a failover cable as well, I would have thought the primary would prevent the failover but I'm not 100 percent sure. Cheers Pat Vamsi Krishna wrote in message news:200210241235.MAA05012;groupstudy.com... Hi, We are facing a strange problem with PIX failover. We have two PIX = 525 (OS 6.0.1) in failover configuration. When the standby PIX is = rebooted for maintenance reasons, it came up and became the Active PIX = (which should not happen). The active PIX showed stateful failover link = failed and so the PIX was in failed state. Both the PIX are connected = through a stateful failover link (100Mbps) using a Crossover cable.=20 Is it a problem because both the PIX are connected using a crossover = cable? Is it recommended to connect through a switch? Has anyone faced a = similar problem? Regards, Vamsi **Disclaimer Information contained in this E-MAIL being proprietary to Wipro Limited is 'privileged' and 'confidential' and intended for use only by the individual or entity to which it is addressed. You are notified that any use, copying or dissemination of the information contained in the E-MAIL in any manner whatsoever is strictly prohibited. *** **Disclaimer Information contained in this E-MAIL being proprietary to Wipro Limited is 'privileged' and 'confidential' and intended for use only by the individual or entity to which it is addressed. You are notified that any use, copying or dissemination of the information contained in the E-MAIL in any manner whatsoever is strictly prohibited. *** Do you Yahoo!? Y! Web Hosting - Let the expert host your web site Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=56274t=56199 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: PIX failover problem [7:56199]
Hi Mike, Have you tried rebooting the Secondary PIX and check if the primary is active and after the rebooted pix comesup ? What is OS version of your PIX ? Vamsi - Original Message - From: mike Dang To: Sent: Friday, October 25, 2002 1:02 PM Subject: Re: PIX failover problem [7:56199] Vamsi, I used the cable provided by Cisco to connect 2 525s through the failover ports and it's been working fine. Even though I don't know the answer but I don't think it's a good idea to connect 2 pixes through a switch. Good luck. Vamsi Krishna wrote:Hi Pat, I have got the correct configuration as mentioned in Cisco. I too think the primary PIX fails as the failover link goes into failed state as the secondary is down and secondary PIX will become active as the primary is in failed state. Has anyone faced this problem ? What is the normal practice of connecting PIX in failover configuration ? through cross over cable or through a separate switch ? Pls reply. Regards, Vamsi - Original Message - From: Patrick Donlon To: Sent: Thursday, October 24, 2002 4:11 PM Subject: Re: PIX failover problem [7:56199] I think you've got your config correct, when any of the interfaces go down on the active PIX it will switch into standby. So when you reboot the standby it will cause this to happen, the documentation does say you should use a separate switch for the failover NICs which should prevent this, http://www.cisco.com/warp/customer/110/failover.html . Do you use a failover cable as well, I would have thought the primary would prevent the failover but I'm not 100 percent sure. Cheers Pat Vamsi Krishna wrote in message news:200210241235.MAA05012;groupstudy.com... Hi, We are facing a strange problem with PIX failover. We have two PIX = 525 (OS 6.0.1) in failover configuration. When the standby PIX is = rebooted for maintenance reasons, it came up and became the Active PIX = (which should not happen). The active PIX showed stateful failover link = failed and so the PIX was in failed state. Both the PIX are connected = through a stateful failover link (100Mbps) using a Crossover cable.=20 Is it a problem because both the PIX are connected using a crossover = cable? Is it recommended to connect through a switch? Has anyone faced a = similar problem? Regards, Vamsi **Disclaimer Information contained in this E-MAIL being proprietary to Wipro Limited is 'privileged' and 'confidential' and intended for use only by the individual or entity to which it is addressed. You are notified that any use, copying or dissemination of the information contained in the E-MAIL in any manner whatsoever is strictly prohibited. *** **Disclaimer Information contained in this E-MAIL being proprietary to Wipro Limited is 'privileged' and 'confidential' and intended for use only by the individual or entity to which it is addressed. You are notified that any use, copying or dissemination of the information contained in the E-MAIL in any manner whatsoever is strictly prohibited. *** Do you Yahoo!? Y! Web Hosting - Let the expert host your web site **Disclaimer Information contained in this E-MAIL being proprietary to Wipro Limited is 'privileged' and 'confidential' and intended for use only by the individual or entity to which it is addressed. You are notified that any use, copying or dissemination of the information contained in the E-MAIL in any manner whatsoever is strictly prohibited. *** Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=56287t=56199 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: PIX failover problem [7:56199]
I think you've got your config correct, when any of the interfaces go down on the active PIX it will switch into standby. So when you reboot the standby it will cause this to happen, the documentation does say you should use a separate switch for the failover NICs which should prevent this, http://www.cisco.com/warp/customer/110/failover.html . Do you use a failover cable as well, I would have thought the primary would prevent the failover but I'm not 100 percent sure. Cheers Pat Vamsi Krishna wrote in message news:200210241235.MAA05012;groupstudy.com... Hi, We are facing a strange problem with PIX failover. We have two PIX = 525 (OS 6.0.1) in failover configuration. When the standby PIX is = rebooted for maintenance reasons, it came up and became the Active PIX = (which should not happen). The active PIX showed stateful failover link = failed and so the PIX was in failed state. Both the PIX are connected = through a stateful failover link (100Mbps) using a Crossover cable.=20 Is it a problem because both the PIX are connected using a crossover = cable? Is it recommended to connect through a switch? Has anyone faced a = similar problem? Regards, Vamsi **Disclaimer Information contained in this E-MAIL being proprietary to Wipro Limited is 'privileged' and 'confidential' and intended for use only by the individual or entity to which it is addressed. You are notified that any use, copying or dissemination of the information contained in the E-MAIL in any manner whatsoever is strictly prohibited. *** Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=56216t=56199 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: PIX failover problem [7:56199]
Hi Pat, I have got the correct configuration as mentioned in Cisco. I too think the primary PIX fails as the failover link goes into failed state as the secondary is down and secondary PIX will become active as the primary is in failed state. Has anyone faced this problem ? What is the normal practice of connecting PIX in failover configuration ? through cross over cable or through a separate switch ? Pls reply. Regards, Vamsi - Original Message - From: Patrick Donlon To: Sent: Thursday, October 24, 2002 4:11 PM Subject: Re: PIX failover problem [7:56199] I think you've got your config correct, when any of the interfaces go down on the active PIX it will switch into standby. So when you reboot the standby it will cause this to happen, the documentation does say you should use a separate switch for the failover NICs which should prevent this, http://www.cisco.com/warp/customer/110/failover.html . Do you use a failover cable as well, I would have thought the primary would prevent the failover but I'm not 100 percent sure. Cheers Pat Vamsi Krishna wrote in message news:200210241235.MAA05012;groupstudy.com... Hi, We are facing a strange problem with PIX failover. We have two PIX = 525 (OS 6.0.1) in failover configuration. When the standby PIX is = rebooted for maintenance reasons, it came up and became the Active PIX = (which should not happen). The active PIX showed stateful failover link = failed and so the PIX was in failed state. Both the PIX are connected = through a stateful failover link (100Mbps) using a Crossover cable.=20 Is it a problem because both the PIX are connected using a crossover = cable? Is it recommended to connect through a switch? Has anyone faced a = similar problem? Regards, Vamsi **Disclaimer Information contained in this E-MAIL being proprietary to Wipro Limited is 'privileged' and 'confidential' and intended for use only by the individual or entity to which it is addressed. You are notified that any use, copying or dissemination of the information contained in the E-MAIL in any manner whatsoever is strictly prohibited. *** **Disclaimer Information contained in this E-MAIL being proprietary to Wipro Limited is 'privileged' and 'confidential' and intended for use only by the individual or entity to which it is addressed. You are notified that any use, copying or dissemination of the information contained in the E-MAIL in any manner whatsoever is strictly prohibited. *** Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=56219t=56199 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
