topic PIX 515E UR: Failover question in Network Security

PIX 515E UR: Failover question

arvindsa — Fri, 21 Feb 2020 07:36:20 GMT

We have two units of 515E UR in failover mode with failover cable and stateful failover.

When we give sh failover, the output comes as

Interface outside (ab.cd.ef.gh): Normal (Waiting)

Interface inside (10.10.8.1): Normal

Interface state (172.16.1.1): Normal

What does [waiting here means], it has been like this always. Infact when we shutdown priomary, the secondary does not take over the primary ip .

The setup is like this

Internet pipe from ISP comes to VLAN2 of switch1. Outside interface of primary is connected to VLAN2. Switch1 and switch2 are in trunk and outside of secondary pix is connected to VLAN2 in switch2. [from vlan2 of switch2, internet is available]

What could be possibly wrong, what does this waiting mean?

thanks to all in advance

Re: PIX 515E UR: Failover question

paddyxdoyle — Tue, 31 Aug 2004 11:52:46 GMT

Hi,

Waiting means that monitoring of the other unit's network interfaces has not yet started.

Can you see the secondary interface IP address in your primary PIX config "show ip address"?

Can you ping the secondary interface from your PIX?

Rgds

Paddy

Re: PIX 515E UR: Failover question

peteruwa — Fri, 03 Sep 2004 11:25:22 GMT

if you have confirmed all that paddy suggested, ensure also that you enabled stateful failover on the primary pix.

Thanks

peteruwa