topic Re: PIX-515E Failover setup in Network Security

PIX-515E Failover setup

chong.eric — Mon, 11 Mar 2019 17:31:34 GMT

Hi,

I have 2 units of PIX 515E. Both have same software version, same number and type of interfaces, activation key type, flash memory and amount of RAM.

But the encryption hardware device is different. One is having VAC+ (Crypto5823 revision 0x1) , the other one is having IRE2141 with 2048KB, HW:1.0, CGXROM:1.9, FW:6.5.

Can I setup failover with these 2 units?

Regards

Eric

Re: PIX-515E Failover setup

Jennifer Halim — Mon, 12 Apr 2010 07:05:23 GMT

What is the part# of the VAC card?

There are 2 VAC card available: PIX-VPN-ACCEL and PIX-VAC-PLUS, and they need to be the same to run PIX in failover.

Re: PIX-515E Failover setup

chong.eric — Mon, 12 Apr 2010 07:10:56 GMT

what is the command to check the VAC part#? Do you mean I can't setup failover with these 2 units?

Regards,

Eric

Re: PIX-515E Failover setup

Jennifer Halim — Mon, 12 Apr 2010 09:14:07 GMT

Yes, seems like you have 1 VAC card and 1 VAC+ card.

"show crypto interface" will show you the actual card.

PIX-VPN-ACCEL is the VAC card

PIX-VAC-PLUS is the VAC+ card

And yes, you can not run failover between the PIX with the above different cards.

Re: PIX-515E Failover setup

chong.eric — Mon, 12 Apr 2010 09:23:45 GMT

Can I upgrade the PIX-VPN-ACCEL to PIX-VAC-PLUS?

Re: PIX-515E Failover setup

Jennifer Halim — Mon, 12 Apr 2010 09:27:59 GMT

Those VAC cards are EOL:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5708/ps5709/ps2030/end_of_life_notice_for_cisco_pix_sec_app_cards_and_hwacc.html

PIX515E is also EOL:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5708/ps5709/ps2030/end_of_life_notice_for_the_Cisco_PIX_515E_Security_Appliance.html

You might consider getting ASA firewalls.

Re: PIX-515E Failover setup

chong.eric — Mon, 12 Apr 2010 09:40:23 GMT

thank you