Failover problems

jay.ratliff — Mon, 11 Mar 2019 11:04:15 GMT

I have 2 PIX515e's with a crossover cable on e5. I get the following error when I start the secondary unit. pix(config-if)# Mate's license (VPN-3DES-AES Enabled) is not compatible with my

license (VPN-3DES-AES Disabled). Failover will be disabled. Any ideas? Thanks........

Primary unit sho ver:

Cisco PIX Security Appliance Software Version 7.2(1)2

Device Manager Version 5.2(1)

Compiled on Wed 14-Jun-06 15:54 by builders

System image file is "flash:/image.bin"

Config file at boot was "startup-config"

pix up 18 hours 4 mins

Hardware: PIX-515E, 128 MB RAM, CPU Pentium II 433 MHz

Flash E28F128J3 @ 0xfff00000, 16MB

BIOS Flash AM29F400B @ 0xfffd8000, 32KB

Encryption hardware device : VAC+ (Crypto5823 revision 0x1)

0: Ext: Ethernet0 : address is 0012.7fa6.96ae, irq 10

1: Ext: Ethernet1 : address is 0012.7fa6.96af, irq 11

2: Ext: Ethernet2 : address is 000d.88ef.7908, irq 11

3: Ext: Ethernet3 : address is 000d.88ef.7909, irq 10

4: Ext: Ethernet4 : address is 000d.88ef.790a, irq 9

5: Ext: Ethernet5 : address is 000d.88ef.790b, irq 5

Licensed features for this platform:

Maximum Physical Interfaces : 6

Maximum VLANs : 25

Inside Hosts : Unlimited

Failover : Active/Active

VPN-DES : Enabled

VPN-3DES-AES : Enabled

Cut-through Proxy : Enabled

Guards : Enabled

URL Filtering : Enabled

Security Contexts : 2

GTP/GPRS : Disabled

VPN Peers : Unlimited

This platform has an Unrestricted (UR) license.

Secondary unit sho ver:

Device Manager Version 5.2(1)

Compiled on Wed 14-Jun-06 15:54 by builders

System image file is "flash:/image.bin"

Config file at boot was "startup-config"

pix up 32 mins 54 secs

Hardware: PIX-515E, 128 MB RAM, CPU Pentium II 433 MHz

Flash E28F128J3 @ 0xfff00000, 16MB

BIOS Flash AM29F400B @ 0xfffd8000, 32KB

Encryption hardware device : VAC+ (Crypto5823 revision 0x1)

0: Ext: Ethernet0 : address is 0012.7fa6.969b, irq 10

1: Ext: Ethernet1 : address is 0012.7fa6.969c, irq 11

2: Ext: Ethernet2 : address is 000d.88ef.76f0, irq 11

3: Ext: Ethernet3 : address is 000d.88ef.76f1, irq 10

4: Ext: Ethernet4 : address is 000d.88ef.76f2, irq 9

5: Ext: Ethernet5 : address is 000d.88ef.76f3, irq 5

Licensed features for this platform:

Maximum Physical Interfaces : 6

Maximum VLANs : 25

Inside Hosts : Unlimited

Failover : Active/Standby

VPN-DES : Enabled

VPN-3DES-AES : Disabled

Cut-through Proxy : Enabled

Guards : Enabled

URL Filtering : Enabled

Security Contexts : 2

GTP/GPRS : Disabled

VPN Peers : Unlimited

This platform has a Failover Only-Active/Standby (FO) license.

Re: Failover problems

srue — Thu, 30 Aug 2007 16:03:58 GMT

The error says it all. you need to apply for the 3des/aes license for the secondary unit. the good news is its free.

https://tools.cisco.com/SWIFT/Licensing/jsp/formGenerator/Pix3DesMsgDisplay.jsp

Re: Failover problems

jay.ratliff — Fri, 31 Aug 2007 17:09:06 GMT

Srue,

I applied it to the primary but not the secondary. Oops. It works now. Thanks...

Jay

topic Re: Failover problems in Network Security

Failover problems

Re: Failover problems

Re: Failover problems