topic PIX 515 failover on power failure. in Network Security https://community.cisco.com/t5/network-security/pix-515-failover-on-power-failure/m-p/543363#M527864 <P>I have two PIX 515 firewalls in failover configuration. If I unplug the active unit from the network, failover occurs as it should. However, if I turn off the active unit, no failover occurs. When I turn the active back on, failover occurs to the standby unit.</P><P></P><P>This is the state shown while the active is powered down.</P><P></P><P>--</P><P>pix01# show fail</P><P>Failover On</P><P>Serial Failover Cable status: Other side powered off</P><P>Reconnect timeout 0:00:00</P><P>Poll frequency 3 seconds</P><P>Last Failover at: 10:26:39 UTC Tue Feb 7 2006</P><P> This host: Primary - Standby</P><P> Active time: 0 (sec)</P><P> Interface outside (10.1.9.88): Normal</P><P> Interface inside (172.16.180.253): Normal</P><P> Interface unused0 (192.168.2.2): Link Down (Shutdown)</P><P> Interface unused1 (192.168.3.2): Link Down (Shutdown)</P><P> Interface unused2 (192.168.4.2): Link Down (Shutdown)</P><P> Other host: Secondary - Active</P><P> Active time: 192 (sec)</P><P> Interface outside (10.1.9.86): Normal</P><P> Interface inside (172.16.180.254): Normal</P><P> Interface unused0 (192.168.2.1): Link Down (Shutdown)</P><P> Interface unused1 (192.168.3.1): Link Down (Shutdown)</P><P> Interface unused2 (192.168.4.1): Link Down (Shutdown)</P><P></P><P>Stateful Failover Logical Update Statistics</P><P> Link : state-fo</P><P> Stateful Obj xmit xerr rcv rerr</P><P> General 20 0 21 0</P><P> sys cmd 20 0 19 0</P><P> up time 0 0 2 0</P><P> xlate 0 0 0 0</P><P> tcp conn 0 0 0 0</P><P> udp conn 0 0 0 0</P><P> ARP tbl 0 0 0 0</P><P> RIP Tbl 0 0 0 0</P><P></P><P> Logical Update Queue Information</P><P> Cur Max Total</P><P> Recv Q: 0 1 21</P><P> Xmit Q: 0 1 20</P><P></P><P>LAN-based Failover is Active</P><P> interface state-fo (192.168.1.1): Link Down, peer (192.168.1.2): Nol</P><P>--</P><P></P><P>According to the documentation, the standby unit should take over if it detects a power failure in the active unit. This seems to be the case, as the show fail command shows that the active unit is powered down. Any ideas?</P> Fri, 21 Feb 2020 08:41:47 GMT btimby_indy 2020-02-21T08:41:47Z PIX 515 failover on power failure. https://community.cisco.com/t5/network-security/pix-515-failover-on-power-failure/m-p/543363#M527864 <P>I have two PIX 515 firewalls in failover configuration. If I unplug the active unit from the network, failover occurs as it should. However, if I turn off the active unit, no failover occurs. When I turn the active back on, failover occurs to the standby unit.</P><P></P><P>This is the state shown while the active is powered down.</P><P></P><P>--</P><P>pix01# show fail</P><P>Failover On</P><P>Serial Failover Cable status: Other side powered off</P><P>Reconnect timeout 0:00:00</P><P>Poll frequency 3 seconds</P><P>Last Failover at: 10:26:39 UTC Tue Feb 7 2006</P><P> This host: Primary - Standby</P><P> Active time: 0 (sec)</P><P> Interface outside (10.1.9.88): Normal</P><P> Interface inside (172.16.180.253): Normal</P><P> Interface unused0 (192.168.2.2): Link Down (Shutdown)</P><P> Interface unused1 (192.168.3.2): Link Down (Shutdown)</P><P> Interface unused2 (192.168.4.2): Link Down (Shutdown)</P><P> Other host: Secondary - Active</P><P> Active time: 192 (sec)</P><P> Interface outside (10.1.9.86): Normal</P><P> Interface inside (172.16.180.254): Normal</P><P> Interface unused0 (192.168.2.1): Link Down (Shutdown)</P><P> Interface unused1 (192.168.3.1): Link Down (Shutdown)</P><P> Interface unused2 (192.168.4.1): Link Down (Shutdown)</P><P></P><P>Stateful Failover Logical Update Statistics</P><P> Link : state-fo</P><P> Stateful Obj xmit xerr rcv rerr</P><P> General 20 0 21 0</P><P> sys cmd 20 0 19 0</P><P> up time 0 0 2 0</P><P> xlate 0 0 0 0</P><P> tcp conn 0 0 0 0</P><P> udp conn 0 0 0 0</P><P> ARP tbl 0 0 0 0</P><P> RIP Tbl 0 0 0 0</P><P></P><P> Logical Update Queue Information</P><P> Cur Max Total</P><P> Recv Q: 0 1 21</P><P> Xmit Q: 0 1 20</P><P></P><P>LAN-based Failover is Active</P><P> interface state-fo (192.168.1.1): Link Down, peer (192.168.1.2): Nol</P><P>--</P><P></P><P>According to the documentation, the standby unit should take over if it detects a power failure in the active unit. This seems to be the case, as the show fail command shows that the active unit is powered down. Any ideas?</P> Fri, 21 Feb 2020 08:41:47 GMT https://community.cisco.com/t5/network-security/pix-515-failover-on-power-failure/m-p/543363#M527864 btimby_indy 2020-02-21T08:41:47Z Re: PIX 515 failover on power failure. https://community.cisco.com/t5/network-security/pix-515-failover-on-power-failure/m-p/543364#M527866 <HTML><HEAD></HEAD><BODY><P>Disabling the lan based failover with the following command sequence fixed my problem:</P><P></P><P>no failover</P><P>no failover lan</P><P>failover</P><P></P><P>I had to run this on both units so that configuration syncronization could continue.</P><P></P><P>Thanks to Kris at TAC for his assistance!</P></BODY></HTML> Wed, 08 Feb 2006 23:14:16 GMT https://community.cisco.com/t5/network-security/pix-515-failover-on-power-failure/m-p/543364#M527866 btimby_indy 2006-02-08T23:14:16Z