and check if the primary
is
> active and after the rebooted pix comesup ? What is OS version of your PIX
?
>
> Vamsi
> - Original Message -
> From: "mike Dang"
> To:
> Sent: Friday, October 25, 2002 1:02 PM
> Subject: Re: PIX failover problem [7:56199]
&
Hi Mike,
Have you tried rebooting the Secondary PIX and check if the primary is
active and after the rebooted pix comesup ? What is OS version of your PIX ?
Vamsi
- Original Message -
From: "mike Dang"
To:
Sent: Friday, October 25, 2002 1:02 PM
Subject: Re: PIX failover
ting PIX in failover configuration ? through cross over cable or
through a separate switch ?
Pls reply.
Regards,
Vamsi
- Original Message -
From: "Patrick Donlon"
To:
Sent: Thursday, October 24, 2002 4:11 PM
Subject: Re: PIX failover problem [7:56199]
> I think you've go
I think you've got your config correct, when any of the interfaces go down
on the active PIX it will switch into standby. So when you reboot the
standby it will cause this to happen, the documentation does say you should
use a separate switch for the failover NICs which should prevent this,
http://
normal practice of
connecting PIX in failover configuration ? through cross over cable or
through a separate switch ?
Pls reply.
Regards,
Vamsi
- Original Message -
From: "Patrick Donlon"
To:
Sent: Thursday, October 24, 2002 4:11 PM
Subject: Re: PIX failover problem [7:56
yes, it will sync automatically, or you can force it
with "write standby"
HTH,
ms
--- "Steven A. Ridder" wrote:
> Speaking of stateful PIX's, if I make a change on 1
> PIX, and it has failover
> on, will it automatically make a change on the other
> PIX?
>
>
> ""Gaz"" wrote in message
> [EMAI
Whenever you type a command on the active unit it's being replicated to the
standby
unit. So yes, it will automatically update standby unit but it's not written
to memory
unless you write to memory on the active first.
""Steven A. Ridder"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTE
Speaking of stateful PIX's, if I make a change on 1 PIX, and it has failover
on, will it automatically make a change on the other PIX?
""Gaz"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> In article , [EMAIL PROTECTED]
> says...
> > Hi,
> >
> > In a Stataful configuration, an
In article , [EMAIL PROTECTED]
says...
> Hi,
>
> In a Stataful configuration, and two PIX are interconnected via a
> dedicated Failover Fastethernet, in case of the Active unit's Internal
> interface fails, is there any method to shift traffic to the Standby
> unit's Internal interface to mainta
In a stateful config, this is done by the standby PIX. It sends hello
packets and runs the interface tests to the active pix and when it doesn't
recieves any response it takes the role of the active pix.
TCP and UDP connections will be maintained but not the IPSec and ICMP.
- Original Messag
And keep in mind this Primary/Secondary business is completely separate from
which
firewall is Active and which is Standby. The Active/Standby question is the
more
important one.
MikeN wrote:
> I believe that the serial numbers will be registered as to whether it is UR
> or a failover. Both will
I believe it's part number PIX-FO= or you could buy it as LD-FO= since it is
the same
cable for the LocalDirector.
Mark Smith wrote:
> Does anyone have the part number for the failover cable for a 515 PIX. Mine
> went MIA during a company move. I can't find on Cisco's or any vendor's
site
> wher
I believe that the serial numbers will be registered as to whether it is UR
or a failover. Both will work as stand-alone firewalls. Yes, the failover
cable will determine which will be primary and which will be secondary. Once
they are configured: show failover will show you which PIX is primary a
Hi,
It is the cable only that selects the primary or secondary (it is even
written on the cable). You make the configuration on the primary, and this
will be sigronized with the secondary.
Hope this helps,
bye,
""Magdy H. Ibrahim"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]..
Statefull failover can be doen if any interface on the PIX goes down. Each
interface needs to be able to talk to the other interface on the second pix.
So the inside on the primary has to be able to communicate with the inside
on the secondary, DMZ to DMZ etc. and for statefull fail there has to b
PIX 520's don't have a R or UR version they all support failover.
""Florin Mechetiuc"" <[EMAIL PROTECTED]> wrote in message
92svsr$482$[EMAIL PROTECTED]">news:92svsr$482$[EMAIL PROTECTED]...
> I have couple of 520 firewalls ordered a while back but I don't know if is
a
> way to check
> if they ar
7;; [EMAIL PROTECTED]
Subject: RE: PIX failover
If you do sh ver from enable mode you get :-
PIX_TH_BB# sh ver
PIX Version 4.4(4)
Compiled on Thu 06-Jan-00 16:07 by pixbuild
PIX BIOS (4.0) #0: Tue May 18 16:29:54 PDT 1999
PIX_TH_BB up 104 days 21 hours
Hardware: PIX-515, 64 MB RAM, CPU Pentium 200
If you do sh ver from enable mode you get :-
PIX_TH_BB# sh ver
PIX Version 4.4(4)
Compiled on Thu 06-Jan-00 16:07 by pixbuild
PIX BIOS (4.0) #0: Tue May 18 16:29:54 PDT 1999
PIX_TH_BB up 104 days 21 hours
Hardware: PIX-515, 64 MB RAM, CPU Pentium 200 MHz
Flash strata @ base 0x300
0: ethernet
Brad,
If the DMZ interface is not being used at the moment you need to connect any
unused interfaces to the same unused interfaces on the standby PIX with a
crossover cable.
Dave Swink
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> BE
> Sent: Fri
A co-worker has seen this and it is a bug. He didn't remember the version
number(s) affected.
Rodgers Moore
""BE"" <[EMAIL PROTECTED]> wrote in message
8ptc7v$7a1$[EMAIL PROTECTED]">news:8ptc7v$7a1$[EMAIL PROTECTED]...
> Rodgers,
>
> Hi! Thanks for your response.
>
> The answer is YES to all o
Rodgers,
Hi! Thanks for your response.
The answer is YES to all of your questions. The really strange thing is,
when I leave the single PIX 510 running for an extended period of time, it
works great, no problems. When I add the second PIX, it just seems to grab
the DMZ connection (but leaves
It sounds like they're both identical. That's good.
Do you have ALL the interfaces in an UP state? and each pair of interfaces
are on the same hub?
A down interface will be considered a failure
Both configs are identical? You power cycled both boxes at the same time?
Rodgers Moore
""BE""
22 matches
Mail list logo
