topic Re: PIX Lost failover communications in Network Security

PIX Lost failover communications

ccaron — Fri, 21 Feb 2020 06:27:38 GMT

My syslog showed a 105005 then 105008 then 105009 message.

I logged into the pix and did a "show fail" and everything looks fine except for one of the interfaces on the other host:

Interface outside (my ip address here): Testing

It never changes from testing...the syslog message says that it passed the test, but I want to know what I can do to get it out of the "testing" state or if something else is wrong.

Thanks,

Chris Caron

Re: PIX Lost failover communications

mpalardy — Mon, 30 Dec 2002 18:47:58 GMT

Look's like a bad cable or a defect FE-card on the other host.

OR perhaps the other host IP address is not in the same subnet as the primary PIX.

Can you ping all the other PIX interfaces?

Re: PIX Lost failover communications

ccaron — Mon, 30 Dec 2002 18:54:43 GMT

This has been a static config for over 2 years.

Yes, I can ping all PIX interfaces, even the one that is stuck in that "testing" state.

Everything appears to work fine, just instead of reporting "normal" it reports testing.

Is this the way it should behave?

Let me know your thoughts.

-CC

Re: PIX Lost failover communications

steve.barlow — Mon, 30 Dec 2002 21:02:55 GMT

If it is the secondary PIX try rebooting it to see if it clears up. If not, but a sniffer on to see if the keepalives/hellos are being sent between the PIXs. May also be a bug. Check the bug tool.

Hope it helps.

Steve

Re: PIX Lost failover communications

ccaron — Mon, 30 Dec 2002 21:38:29 GMT

I actually will try rebooting the secondary pix to see if that works as you suggest. That is probably it, it will probably clear out that "testing" status when I do it.

I will post again with the results next week after I do it.

-Cheers,

Chris