We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you a podcast all about Citrix Workspace, moving to the cloud, and analytics & intelligence. Episode 2 coming soon!Listen Now

x

Failover in PIX

ssshibu
ssshibu asked
on
Medium Priority
433 Views
Last Modified: 2013-11-16
Hi,


Can you please help me to configure Failover between Cisco PIX 525 firewall. Thought of doing Cable based failover... I am going to have PIX OS version 7.0

Please clarrify my below doubts ..!!!

1. Do i need to assign ips in all interface of  Primary firewall and Standby firewall ?

2. What are the configuration which we need to do it in Standby firewall ?

3. How do i upgrade OS on a failover mode PIX ?

Please get back to me







Comment
Watch Question

Les MooreSr. Systems Engineer
CERTIFIED EXPERT
Top Expert 2008

Commented:
>1. Do i need to assign ips in all interface of  Primary firewall and Standby firewall ?
Yes. With 7.x you cannot use 127.0.0.x or un-assigned

>2. What are the configuration which we need to do it in Standby firewall ?
Nothing. All configuration is done on Primary only

>3. How do i upgrade OS on a failover mode PIX ?
Use this procedure:
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094a5d.shtml#failover

Author

Commented:
Thanks for your quick reply

2. What are the configuration which we need to do it in Standby firewall ?
Nothing. All configuration is done on Primary only

When do i need to connect this failover and stateful failover cable between Primary and Standby firewall?  this is to be done after all configuration done in Primary pix ? initially how do i replicate the current configuration to Standby firewall? by any command? what is the host name i need to give it in Standby mode?
Sr. Systems Engineer
CERTIFIED EXPERT
Top Expert 2008
Commented:
Reference document:
http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_guide_chapter09186a008017278a.html

>When do i need to connect this failover and stateful failover cable between Primary and Standby firewall?  
Connnect the serial failover cable before you power on the standby unit. Connect the stateful whenever you want.

> this is to be done after all configuration done in Primary pix ?
Does not matter

>initially how do i replicate the current configuration to Standby firewall?
Enable failover, then write standby
One simple command on Primary:
  failover
  write standby

>what is the host name i need to give it in Standby mode?
Does not matter. When a failover occurs it has same name as Primary.


Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.