topic Active State Pix in Network Security

Active State Pix

mmedwid — Fri, 21 Feb 2020 09:07:42 GMT

I have a question about the "show fail" output below. Note that the secondary pix on which it was run shows "Active time" 4475970 seconds - about 52 days. But it shows the primary pix as "Active time 91301925 seconds - about 1056 days. How can there be this discrepancy in timeframes if they were originally deployed as a pair? Thanks.

PIX123# show fail

Failover On

Cable status: Normal

Reconnect timeout 0:00:00

Poll frequency 15 seconds

This host: Secondary - Active

Active time: 4475970 (sec)

Interface outside (20.24.13.8): Normal

Interface inside (10.1.8.4): Normal

Interface iplink (0.0.0.0): Link Down (Shutdown)

Interface netsvcs (10.1.0.4): Normal

Interface bidware (10.1.4.4): Normal

Interface fail (1.1.1.1): Normal

Other host: Primary - Standby

Active time: 91301925 (sec)

Interface outside (20.24.13.9): Normal

Interface inside (10.1.8.5): Normal

Interface iplink (0.0.0.0): Link Down (Shutdown)

Interface netsvcs (10.1.0.5): Normal

Interface bidware (10.1.4.5): Normal

Interface fail (1.1.1.2): Normal

Re: Active State Pix

mpalardy — Tue, 22 Aug 2006 18:39:08 GMT

To know the up-time (since last reboot) for a pix you must do a show version command on both units. The show failover command will display the time pix was running as the active unit. This counter only increase on the active unit.

Re: Active State Pix

grant.maynard — Tue, 22 Aug 2006 20:21:45 GMT

I agree, the "active time" is how long each has been the active one of the pair. So total uptime would be about 52 days + 1056 days = 1108 days.

A "show version" should confirm that.