topic Re: Pix failover upgrade in Network Security

Pix failover upgrade

Ernesto Fernandez gomez-pinto — Fri, 21 Feb 2020 07:17:12 GMT

Hello,

How i upgrade the image software of two Pix in failover (one UR and other FO) without loss of conection?.

How work the FO unit if it isn´t conected to the UR unit?, for example, i have my two pixes working and the UR fail and i have replaced it, in this moment i have the FO working only, there is a problem if the FO is reloaded in this moment, the FO unit boot and it don´t detect a UR unit, can the FO unit work without problem until i replace the UR unit and conect it?.

Regards and sorry by my poor english.

Re: Pix failover upgrade

pmays — Thu, 11 Mar 2004 13:21:29 GMT

You will upgrade the UR, (the FO is now the active PIX), then upgrade the FO.

Here is a link:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094a5d.shtml#failover

Re: Pix failover upgrade

Ernesto Fernandez gomez-pinto — Thu, 11 Mar 2004 14:32:30 GMT

I´m sorry but this procedure isn´t whitout loos of conection. The step 9 tell me that while the primary boot i have a loss of conection.

Regards.

Re: Pix failover upgrade

pmays — Thu, 11 Mar 2004 15:15:31 GMT

true. I know of no supported way to do this with zero downtime.

I have seen messages where people have tried but it resulted in a reboot anyway. I would not risk it.

I know that this is a current feature request, but I have not seen any messages stating it has been committed.

Sorry...

Re: Pix failover upgrade

wmostafa — Thu, 11 Mar 2004 16:28:35 GMT

yes you can do this ...

first: make sure that the failover cable is connected to the FO pix. (i know that the other end will not be connected becuase you dont have the UR pix untill now ) but it is ok .. the FO will reboot fine.

second: enter the FO pix configuration mode, and issue the command "Failover Active"

Now you will have the FO pix working fine, although the UR is not connected.

try it , a nice trick 🙂

see you