I have couple of 520 firewalls ordered a while back but I don't know if is a
way to check
if they are in failover bundle.
To be more specific , I have one up and running but I would like to install
the failover and I don't which one is ( I have other three
ordered for other projects). I think it m
]
Subject: PIX failover
I have couple of 520 firewalls ordered a while back but I don't know if is a
way to check
if they are in failover bundle.
To be more specific , I have one up and running but I would like to install
the failover and I don't which one is ( I have other three
ordered
7;; [EMAIL PROTECTED]
Subject: RE: PIX failover
If you do sh ver from enable mode you get :-
PIX_TH_BB# sh ver
PIX Version 4.4(4)
Compiled on Thu 06-Jan-00 16:07 by pixbuild
PIX BIOS (4.0) #0: Tue May 18 16:29:54 PDT 1999
PIX_TH_BB up 104 days 21 hours
Hardware: PIX-515, 64 MB RAM, CPU Pentium 200
PIX 520's don't have a R or UR version they all support failover.
""Florin Mechetiuc"" <[EMAIL PROTECTED]> wrote in message
92svsr$482$[EMAIL PROTECTED]">news:92svsr$482$[EMAIL PROTECTED]...
> I have couple of 520 firewalls ordered a while back but I don't know if is
a
> way to check
> if they ar
Hi all,
I configure the two PIX with failover function. Is it once there is a
link (in, out or DMZ) connected to PIX is going down, then the failover
would be activated?
Is it I can only configure one instance for each interface (in, out and
DMZ) on one PIX? If so, why PIX 520 has six slots, if
Hey gang! Any Pix gurus out there?
I've been playing with a couple of Pixs (510s) trying to get the failover to
work. I thought it would be a piece of cake, but it just isn't showing me
any love. Ive got (2) Pix 510s that each have 3 NICs in them (internal,
untrusted, DMZ) each running 4.4. E
f failover. It's the whole pix or not.
You can have up to 6 and maybe even 8 now configured on the pix in a
stateful failover with the 5.x code.
-Original Message-
From: mak [mailto:[EMAIL PROTECTED]]
Sent: Monday, January 08, 2001 10:37 PM
To: [EMAIL PROTECTED]
Subject: PIX fail
It sounds like they're both identical. That's good.
Do you have ALL the interfaces in an UP state? and each pair of interfaces
are on the same hub?
A down interface will be considered a failure
Both configs are identical? You power cycled both boxes at the same time?
Rodgers Moore
""BE""
Rodgers,
Hi! Thanks for your response.
The answer is YES to all of your questions. The really strange thing is,
when I leave the single PIX 510 running for an extended period of time, it
works great, no problems. When I add the second PIX, it just seems to grab
the DMZ connection (but leaves
A co-worker has seen this and it is a bug. He didn't remember the version
number(s) affected.
Rodgers Moore
""BE"" <[EMAIL PROTECTED]> wrote in message
8ptc7v$7a1$[EMAIL PROTECTED]">news:8ptc7v$7a1$[EMAIL PROTECTED]...
> Rodgers,
>
> Hi! Thanks for your response.
>
> The answer is YES to all o
BE
> Sent: Friday, September 15, 2000 8:44 AM
> To: [EMAIL PROTECTED]
> Subject: Pix Failover Question
>
>
> Hey gang! Any Pix gurus out there?
>
> I've been playing with a couple of Pixs (510s) trying to get the
> failover to
> work. I thought it would be a piece
Dear All,
Sorry for the stupid question but I want to confirm it.
I have to configure my PIX 515UR bundle...
How can I know the primary unit from the secondary unit??
Is that from the failover cable only OR there is an other thing marked the
unit as primary or secondary???
Please advice me soon,
Hi,
In a Stataful configuration, and two PIX are interconnected via a
dedicated Failover Fastethernet, in case of the Active unit's Internal
interface fails, is there any method to shift traffic to the Standby
unit's Internal interface to maintain connectivity, thanks.
Leo
Best Regards.
Mess
Hi,
It is the cable only that selects the primary or secondary (it is even
written on the cable). You make the configuration on the primary, and this
will be sigronized with the secondary.
Hope this helps,
bye,
""Magdy H. Ibrahim"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]..
I believe that the serial numbers will be registered as to whether it is UR
or a failover. Both will work as stand-alone firewalls. Yes, the failover
cable will determine which will be primary and which will be secondary. Once
they are configured: show failover will show you which PIX is primary a
Does anyone have the part number for the failover cable for a 515 PIX. Mine
went MIA during a company move. I can't find on Cisco's or any vendor's site
where I can order just the cable by itself. A part number would be really
nice. Next best thing would be the pin out for the cable so I could (ma
And keep in mind this Primary/Secondary business is completely separate from
which
firewall is Active and which is Standby. The Active/Standby question is the
more
important one.
MikeN wrote:
> I believe that the serial numbers will be registered as to whether it is UR
> or a failover. Both will
Hi,
We are facing a strange problem with PIX failover. We have two PIX =
525 (OS 6.0.1) in failover configuration. When the standby PIX is =
rebooted for maintenance reasons, it came up and became the Active PIX =
(which should not happen). The active PIX showed stateful failover link =
failed
ginal Message -
From: "Leo Song"
To:
Sent: Thursday, August 15, 2002 9:21 PM
Subject: PIX Failover [7:51491]
> Hi,
>
> In a Stataful configuration, and two PIX are interconnected via a
> dedicated Failover Fastethernet, in case of the Active unit's Internal
> inte
In article , [EMAIL PROTECTED]
says...
> Hi,
>
> In a Stataful configuration, and two PIX are interconnected via a
> dedicated Failover Fastethernet, in case of the Active unit's Internal
> interface fails, is there any method to shift traffic to the Standby
> unit's Internal interface to mainta
Speaking of stateful PIX's, if I make a change on 1 PIX, and it has failover
on, will it automatically make a change on the other PIX?
""Gaz"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> In article , [EMAIL PROTECTED]
> says...
> > Hi,
> >
> > In a Stataful configuration, an
Whenever you type a command on the active unit it's being replicated to the
standby
unit. So yes, it will automatically update standby unit but it's not written
to memory
unless you write to memory on the active first.
""Steven A. Ridder"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTE
yes, it will sync automatically, or you can force it
with "write standby"
HTH,
ms
--- "Steven A. Ridder" wrote:
> Speaking of stateful PIX's, if I make a change on 1
> PIX, and it has failover
> on, will it automatically make a change on the other
> PIX?
>
>
> ""Gaz"" wrote in message
> [EMAI
I believe it's part number PIX-FO= or you could buy it as LD-FO= since it is
the same
cable for the LocalDirector.
Mark Smith wrote:
> Does anyone have the part number for the failover cable for a 515 PIX. Mine
> went MIA during a company move. I can't find on Cisco's or any vendor's
site
> wher
Hello all,
Was wondering what is the main difference between the PIX "Failover Bundle"
and say "Unrestricted Bundle"? Is it just the software? is the hardware
similar? Can we upgrade ? If so how?
Please enlighten me.
Thanks.
roe.
Message Posted at:
http://www.groupstudy.c
...
> Hi,
>We are facing a strange problem with PIX failover. We have two PIX =
> 525 (OS 6.0.1) in failover configuration. When the standby PIX is =
> rebooted for maintenance reasons, it came up and became the Active PIX =
> (which should not happen). The active PIX showed sta
normal practice of
connecting PIX in failover configuration ? through cross over cable or
through a separate switch ?
Pls reply.
Regards,
Vamsi
- Original Message -
From: "Patrick Donlon"
To:
Sent: Thursday, October 24, 2002 4:11 PM
Subject: Re: PIX failover problem [7:56
ting PIX in failover configuration ? through cross over cable or
through a separate switch ?
Pls reply.
Regards,
Vamsi
- Original Message -
From: "Patrick Donlon"
To:
Sent: Thursday, October 24, 2002 4:11 PM
Subject: Re: PIX failover problem [7:56199]
> I think you've go
Hi Mike,
Have you tried rebooting the Secondary PIX and check if the primary is
active and after the rebooted pix comesup ? What is OS version of your PIX ?
Vamsi
- Original Message -
From: "mike Dang"
To:
Sent: Friday, October 25, 2002 1:02 PM
Subject: Re: PIX failover
and check if the primary
is
> active and after the rebooted pix comesup ? What is OS version of your PIX
?
>
> Vamsi
> - Original Message -
> From: "mike Dang"
> To:
> Sent: Friday, October 25, 2002 1:02 PM
> Subject: Re: PIX failover problem [7:56199]
&
Hi Pals
I wish to know wheather 2 cisco pix firewalls can be configured for
redundancy
as well as Load balancing.
In general failover means in case of active PIX fails the stand by one will
come into line.
But my customer wants FWLB (Fire wall load balancing).
If any one has idea on this pleas
:[EMAIL PROTECTED]]
Sent: Monday, June 17, 2002 12:00 PM
To: [EMAIL PROTECTED]
Subject: Router 3DES VPN to Pix Failover [7:46813]
Hi all,
Anybody got any experience using 3DES to Pix Failover.
I have a 2621 with 3DES using VPN to Pix 515 Failover bundle.
All works fine after initial boot. Fails
sage
news:[EMAIL PROTECTED]...
> Hi all,
>
> Anybody got any experience using 3DES to Pix Failover.
>
> I have a 2621 with 3DES using VPN to Pix 515 Failover bundle.
>
> All works fine after initial boot. Fails over to secondary Pix when I kill
> the Primary.
>
> If I try
Yes, certain models have a serial fail over link. (515?), look at
cisco web page for more details. If you buy another NIC, you can even have
stateful failover. (retains all tcp connection information to the other
firewall). Although, I wonder if you "really" need it since I did get it
work
AFAIK PIX Failover only provides redundancy, no traffic load balance.
If you need Firewall load-balance, go to the Nokia IP series
firewall, or Checkpoint+Stonebeat combo (www.stonebeat.com)
HTH
> I wish to know wheather 2 cisco pix firewalls can be configured for
> redundancy
> as wel
Or you could stick a CSS or two infront of the pixes.
Regards,
Dave
-Original Message-
From: Engelhard M. Labiro [mailto:[EMAIL PROTECTED]]
Sent: Monday, November 19, 2001 8:47 AM
To: [EMAIL PROTECTED]
Subject: Re: Is Pix failover can be Load balancer ? [7:26673]
AFAIK PIX Failover
Check out Alteon load balancer, they have a white paper how to do firewall
load balancing. And they are very complicated & expensive. And why not just
buy a high end model with gigabit throughput then no need for load
balancing?
""Sivarajan Thiruvadi"" wrote in message
[EMAIL PROTECTED]">news:[EM
Can't load balance, one pix is active, the other standby.
Dave
Sivarajan Thiruvadi wrote:
>
> Hi Pals
>
> I wish to know wheather 2 cisco pix firewalls can be configured for
> redundancy
> as well as Load balancing.
>
> In general failover means in case of active PIX fails the stand by one
You need to get yourself some real load-balancers (i.e. CSS, F5 BigIP,
Foundry ServerIron, Alteon Acedirector, etc.) and make yourself a "firewall
sandwich". Mmmm, tasty.
""Sivarajan Thiruvadi"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi Pals
>
> I wish to know whea
November 19, 2001 9:45 PM
Subject: Re: Is Pix failover can be Load balancer ? [7:26673]
> You need to get yourself some real load-balancers (i.e. CSS, F5 BigIP,
> Foundry ServerIron, Alteon Acedirector, etc.) and make yourself a
"firewall
> sandwich". Mmmm, tasty.
>
>
does not yet support Long Distance State Sharing (LDSS).
So PIX can be stateful when properly configured - or did I miss something in
the thread??
Kevin Wigle
- Original Message -
From: "Circusnuts"
To:
Sent: Monday, 19 November, 2001 22:11
Subject: Re: Is Pix failo
rewall each user sessions will
traverse.
All the best !!!
Phil
- Original Message -
From: "Kevin Wigle"
To: "Circusnuts" ;
Sent: Monday, November 19, 2001 10:54 PM
Subject: Re: Is Pix failover can be Load balancer ? [7:26673]
> actually. no??
>
> When I was
1/2001 03:51 pm -
"Kevin
Wigle"
cc:
Sent by: Subject: Re: Is Pix failover
can be Load
nobody@groupstudbalancer ?
[7:26673]
Jenny you are right.
Pix does the state information transmission but does not do load balancing.
As someone else said above, get Stonebeat if you want a firewall that can do
it all.
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26950&t=26673
44 matches
Mail list logo
