Changing PIX 515E Failover Interface IPs

[Sighclops]

I am looking to change my Failover Int IPs on my PIX 515E Bundle, Cisco PIX Firewall Version 6.3(5)123 with the least impact on the network.

For example:

interface ethernet5 "state"

IP address 172.18.0.245, subnet mask 255.255.255.252

ip address state 172.18.0.245 255.255.255.252

failover ip address state 172.18.0.246

I want to change these lines to .....

interface ethernet5 "state"

IP address 172.18.0.185, subnet mask 255.255.255.252

ip address state 172.18.0.185 255.255.255.252

failover ip address state 172.18.0.186

Thanks

[PAUL GILBERT ARIAS]

You can make the change on the primary and then the secondary unit. IF your primary unit is active you can make the changes on the primary unit without failiing over. You will also need to make those changes on the secondary unit so that they can sync again.

In case you are worried about an outage you could try doing it off hours.

I hope this helps.

[Sighclops]

Thanks Paul, so I would not need to disable failover before making those changes on the Primary? Would it matter which lines I change first?

[PAUL GILBERT ARIAS]

If you don't mind I would like to try on a lab. I don't remember well if you need to disable failover. Now that you mentioned it I think you have to. It's being a while.