?
Solved

PIX 6.2 Standby (Failed) message

Posted on 2003-02-24
1
Medium Priority
?
352 Views
Last Modified: 2012-06-21
Please find show failover output. I am being shown standby (failed). what does it mean?
Pix-Admin1(config)# sh fail
failover On
Cable status: Normal
Reconnect timeout 0:00:00
Poll frequency 15 seconds
  This host: Secondary - Active
       Active time: 2910 (sec)
       Interface statefailover (3.3.3.1): Normal (Waiting)
  Other host: Primary - Standby (Failed)
       Active time: 238050 (sec)
       Interface statefailover (3.3.3.2): Normal

Users can access the inernet, as one of the firewalls is up. what could be wrong with the second one?
I can successfully ping the standby unit.

Second questios is, how do I analyse traffic using fixup commands. I have the follwoing commands configured on the PIX:
fixup protocol ftp 21
fixup protocol http 80
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol ils 389
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol sip 5060
fixup protocol skinny 2000

How do I use them to analyze traffic or how do I know what is teh advantage of having these commands?
               
0
Comment
Question by:net-geek
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 79

Accepted Solution

by:
lrmoore earned 150 total points
ID: 8009918
>Other host: Primary - Standby (Failed)

This is saying that the reason it is in Standby vs Active status is due to a failure of some type. This could have been a forced failover. Since the other one has only been active for 48 minutes, it had to have been something very recent.

Monitoring the firewall:
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_62/config/sysmgmt.htm

You can't really analyze traffice using the fixups, but they have a very specific purpose:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_62/config/fixup.htm
0

Featured Post

Connect further...control easier

With the ATEN CE624, you can now enjoy a high-quality visual experience powered by HDBaseT technology and the convenience of a single Cat6 cable to transmit uncompressed video with zero latency and multi-streaming for dual-view applications where remote access is required.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When speed and performance are vital to revenue, companies must have complete confidence in their cloud environment.
This article explains the fundamentals of industrial networking which ultimately is the backbone network which is providing communications for process devices like robots and other not so interesting stuff.
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
Suggested Courses

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question