PIX Failover setup question

Posted on 2004-12-01
Last Modified: 2013-11-16
I just want to run this by the experts to make sure I have it correct. All I need to do to configure my redundant pix for failover is to give each interface an IP address on the existing subnet currently configured on the production firewall right? Then it is just a matter of configureing the production for failover, hooking up the failover cable and powering on the backup correct?

Production PIX -

Int 1 - outside
Int 2 -     dmz
Int 3 -    inside

Failover PIX -

Int 1 -  outside
Int 2 -       dmz
Int 3 -       inside

Is there anything else I need to do on the failover pix? Is there any good step by step articles that describe exactly how to do this?  
Question by:MrWhitefolks
    LVL 11

    Accepted Solution

    Both of these documents are excellent resources on how to configure failover and understand the concepts beneath it.

    LVL 79

    Expert Comment

    Basically, you don't have to do anything on the failover pix at all. All the configuration is done on the primary PIX.
    Plug the failover cable between the PIX's, configure the primary with , enable failover - simple "failover" command, and you're done.

    Here's Cisco's official documentation that explains in great detail..

    Featured Post

    Threat Intelligence Starter Resources

    Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

    Join & Write a Comment

    I thought I'd write this up for anyone who has a request to create an anonymous whistle-blower-type submission form created using SharePoint 2010 (this would probably work the same for 2013). It's not 100% fool-proof but it's as close as you can get…
    Don’t let your business fall victim to the coming apocalypse – use our Survival Guide for the Fax Apocalypse to identify the risks and signs of zombie fax activities at your business.
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now