topic Re: PIX failover config in Network Security

PIX failover config

ciscoforum — Fri, 21 Feb 2020 09:05:07 GMT

Is the standby address on the interface pingable in normal mode (Normal mode meaning primary is still active and 2nd one is still in standby mode)

The reason to ask this is one of our customer configured the standby address which is used for another device. I am thinking this is not right. But just need to confirm this. Thanks

Re: PIX failover config

Fernando_Meza — Tue, 01 Aug 2006 23:52:02 GMT

Hi ... the standby interfaces is only used for failover communications it can't be pinged however you should get an available IP instead of using the same .. this is mainly to keep your set up clean.

I hope it helps ... please rate it if it does !!!

Re: PIX failover config

jcalvert — Fri, 04 Aug 2006 12:59:18 GMT

The standby address should be unique to the failover firewall. You should not use an IP address already in use by another device. And yes, it is possible to ping the standby ip address, if icmp is allowed on that interface. i.e. "icmp permit [] "

You can even login to the secondary firewall using the failover IP address, but do not change the configuration. It's useful for when you want to intentionally failover the firewall. (Login to the secondary and run "failover active".)

Jeff

Re: PIX failover config

Fernando_Meza — Sun, 06 Aug 2006 02:15:41 GMT

Agree with Jeff I have got mixed up with my previous post ... please disregard the "it can't be pinged" part of it .. !!!