topic Changing PIX 515E Failover Interface IPs in Network Security

Changing PIX 515E Failover Interface IPs

Sighclops — Mon, 11 Mar 2019 20:02:24 GMT

I am looking to change my Failover Int IPs on my PIX 515E Bundle, Cisco PIX Firewall Version 6.3(5)123 with the least impact on the network.

For example:

interface ethernet5 "state"

IP address 172.18.0.245, subnet mask 255.255.255.252

ip address state 172.18.0.245 255.255.255.252

failover ip address state 172.18.0.246

I want to change these lines to .....

interface ethernet5 "state"

IP address 172.18.0.185, subnet mask 255.255.255.252

ip address state 172.18.0.185 255.255.255.252

failover ip address state 172.18.0.186

Thanks

Re: Changing PIX 515E Failover Interface IPs

PAUL GILBERT ARIAS — Mon, 07 Mar 2011 20:04:47 GMT

You can make the change on the primary and then the secondary unit. IF your primary unit is active you can make the changes on the primary unit without failiing over. You will also need to make those changes on the secondary unit so that they can sync again.

In case you are worried about an outage you could try doing it off hours.

I hope this helps.

Re: Changing PIX 515E Failover Interface IPs

Sighclops — Mon, 07 Mar 2011 20:30:18 GMT

Thanks Paul, so I would not need to disable failover before making those changes on the Primary? Would it matter which lines I change first?

Re: Changing PIX 515E Failover Interface IPs

PAUL GILBERT ARIAS — Mon, 07 Mar 2011 20:35:34 GMT

If you don't mind I would like to try on a lab. I don't remember well if you need to disable failover. Now that you mentioned it I think you have to. It's being a while.