topic Re: PIX Failover update in Network Security

PIX Failover update

ppoiron — Mon, 11 Mar 2019 11:55:17 GMT

I planned to update 2 PIX 525 in failover Active/Standby configuration from 6.3 to 7.2.

For that, I will failover on the standby pix and disconnect all the primary cables (including serial cables)to upgrade it locally.

Primary PIX has an UR license and Secondary a FO license.

I have a question:

If I disconnect all the cables of the Primary PIX, will the Standby one continue to pass the trafic until the primary pix will recover ?

Thanks in advance for your help.

Patrice

Re: PIX Failover update

shahzad-ali — Tue, 29 Jan 2008 16:49:51 GMT

To verify perform failover and power off primary in your MW. It should pass the traffic but I would like see more reply on your question.

Following url might help.

http://www.cisco.com/en/US/customer/docs/security/asa/asa70/pix_upgrade/upgrade/guide/pixupgrd.html

Re: PIX Failover update

ppoiron — Tue, 29 Jan 2008 17:01:11 GMT

Thanks.

I knew that procedure, but I would like to update only one of my both PIX in version 7.2 to let us time to check the good functionality.

By the way, if I encountered an important issue, I just would power off my primary PIX and power on the Standby in version 6.3 to minimize the downtime.

So, it's important for me to know if I disconnect completely the Primary PIX, the secondary will continue to work during several days.

Re: PIX Failover update

ppoiron — Wed, 30 Jan 2008 12:53:05 GMT

I heard that a failover only (FO) will reboot every day if it does not detect the primary UR failover peer.

Is it true ?

Will it arrive if the serial failover cable is always connected by the primary PIX is powered off ?

I can't test it now by less of equipment.

Thanks for advice.

Re: PIX Failover update

cisco__kaushik — Wed, 30 Jan 2008 17:20:57 GMT

Hi,

Yes the secondary will still forward the traffic

Re: PIX Failover update

cisco__kaushik — Wed, 30 Jan 2008 17:35:41 GMT

The pix with FO license will reboot automatically every 24hrs.I guess it will behave the same way even if it is attached to the primary pix which is powered off

Re: PIX Failover update

enandres — Tue, 27 Jan 2009 15:22:03 GMT

Yes with the FO license, it will reboot every 24h if it does not see the primary.