topic Re: Re-configuring a PIX to not fail-over on a inteface failure in Network Security

Re-configuring a PIX to not fail-over on a inteface failure

rosario.garufi — Fri, 21 Feb 2020 07:43:11 GMT

I would like to configure my pixs to only fail-over on only the interfaces I want.

Re: Re-configuring a PIX to not fail-over on a inteface failure

nkhawaja — Tue, 02 Nov 2004 05:55:04 GMT

Do you mean in case of a failure of a particular interface then you want the PIX to failover? If so it is not possible. PIX will failover if it detects a failure on any of the interface.

Re: Re-configuring a PIX to not fail-over on a inteface failure

rosario.garufi — Tue, 02 Nov 2004 13:59:34 GMT

ok, I have an interface always in waiting. The PIXs flip-flop, I would like to configure the PIXs to not fail-over based on that interface. Basically ignore lan failover on that interface, make sense?

Thanks.

Re: Re-configuring a PIX to not fail-over on a inteface failure

davecs — Tue, 09 Nov 2004 03:33:14 GMT

you cant do it.

you should find out why the interface is in waiting state.. and fix the problem 🙂

you COULD disable the interface - but what would be the good of that!

Re: Re-configuring a PIX to not fail-over on a inteface failure

rosario.garufi — Tue, 09 Nov 2004 15:52:23 GMT

Why would the interface be stuck in waiting? When it does flip-flop and the secondary takes over it works fine. it never goes to normal..

Re: Re-configuring a PIX to not fail-over on a inteface failure

davecs — Wed, 10 Nov 2004 02:35:12 GMT

hi,

waiting could mean many things:

1) no ip address has been configured on the interface (both ip and failover ip)

2) the switch port is running STP which means PIX will have a longer wait time.

if you can copy/paste config and show failover we might be able to have a closer look.