topic Re: pix failover in Network Security

pix failover

elettronicaspa — Fri, 21 Feb 2020 07:32:14 GMT

Hi, I have two Pix 515E in statefull failover between them.

the failover it works correctly but switch from primary to secondary without reason or at least I don't detect it.

Please if someone have a solution for my problem answer me soon because I have many troubles

thanks

Re: pix failover

nkhawaja — Fri, 30 Jul 2004 15:54:58 GMT

Hi,

Two possibilites, any interface on primary is flapping or going down, or the primary firewall itself is crashing.

Question: if the secondary becomes active, does it stay active or it flaps too?

YOu need to collect syslog information from the PIX. What PIX version is it? Can you type "show crash" and see if there is any output, if there is , please provide

Thanks

Nadeem

Re: pix failover

elettronicaspa — Mon, 02 Aug 2004 08:44:43 GMT

Hi Nadeem and thanks for your answer.

The failover unit flaps too but I can't see the reason.

I try to collect syslog messages.

The pix version is 6.3(1).

the show crash output is in attachments.

Thank you for your interesting

bye.

Re: pix failover

scoclayton — Mon, 02 Aug 2004 12:08:02 GMT

This appears to be related to a bug in the PIX code - CSCea72383 - PIX crashes in isakmp receiver thread. I would suggest upgrading to 6.3(4) on both units and checking the stability. This defect has been fixed and verified.

Let us know how it goes.

Scott

Re: pix failover

elettronicaspa — Mon, 02 Aug 2004 12:22:55 GMT

thank you for your answer I'll try to upgrade the ios and check it.

Excuse for my english.

thanks

bye

david