topic Pix active/active failover in Network Security

Pix active/active failover

fernanrl — Fri, 21 Feb 2020 08:39:24 GMT

Hi,

First of all, thanks for your time. I have a question implementing active/active failover on a pix with 7.0. I have two pix 535 with 3 ethernets (inside, outside and failover). Until now they were in active/pasive but I would like to put them in active/active. Is there a way of doing this WITHOUT installing any more ethernet cards? Further more, can this be done using just one context? I found this info:

http://www.cisco.com/en/US/products/ps6120/products_configuration_guide_chapter09186a008045247e.html#wp1096075

Can I implement it some other way?

Kindest regards,

Fernando

CCIE#144XX CCNP CCDP

Re: Pix active/active failover

jilahbg — Thu, 19 Jan 2006 12:31:31 GMT

Hello

IMHO the "active/active" is just sales talk. What Cisco means when they saids active/active in pix7/ASA is just load balancing if You are running multiple fw contexts.

For each virtual firewall you setup one physical fw as active, and the other as passive. If you have 4 virutal fw:s (contexts), you set Fw A as active for context 1 and 2, and Fw B as active for context 3 and 4. In that way, when a unit fails, the two contexts that are active on that unit will fail over to the other unit.

If You are not running multiple contexts in your firewalls you cannot use active/active failover.

Sorry, it disappointed me too when I realized...

Regards Jimmy

Re: Pix active/active failover

vramanaiah — Thu, 16 Feb 2006 07:55:25 GMT

Can we do Active/Active with FWSM blade as well? Of course, assuming i run multi-context...