topic Failover pix become the permanent active? in Network Security

Failover pix become the permanent active?

carlos.hernandez — Fri, 21 Feb 2020 09:14:37 GMT

After the Primary failed the Standby has become the Active running over a month with new changes. Can the Standby force "write standby" to the old Primary pix before making the old Primary the Active?

Re: Failover pix become the permanent active?

carlos.hernandez — Tue, 17 Oct 2006 16:29:27 GMT

if the above can't be done does anyone know how much time the Standby with FO license is allowed to run before bring up the Primary with UR license online and making it the Active?

Carlos

Re: Failover pix become the permanent active?

ethiel — Wed, 18 Oct 2006 03:10:11 GMT

You can write standby to push the config to the "primary" that is currently standby. The following link confirms this:

http://www.ciscotaccc.com/kaidara-advisor/security/showcase?case=K15656661

As it mentions, the main gotcha is you need to configure failover first on the replacement unit (makes sense).

- Eric

Re: Failover pix become the permanent active?

carlos.hernandez — Wed, 18 Oct 2006 15:15:08 GMT

that is precisely what I was wondering. Thanks for confirming the process. The key thing is that the replication does not occur automatically when preempt is not configured.

thanks very much for your response.

regards,

carlos

Re: Failover pix become the permanent active?

ethiel — Wed, 18 Oct 2006 17:36:42 GMT

Actually, to slightly revise my post, the link at the bottom of that page points out that if the new PIX is booted with the failover cable already connected, it will receive the config from the already running one. This is good in your situation, but bad if you have config on the new one that you want to keep.

-Eric

Please remember to rate all helpful posts.