failover pix shuts down intermittently.

[isomemberr]

Hello,

My backup pix shuts down intermittently and doesnt come up till i do a wr standby. Pls what could be causing this?

[mpalardy]

Identical pix's?

How FO pix is connected to primary? (LAN or FO serial cable)

What's the output from "show failover" command on both pix...

Mike

[isomemberr]

Hello Mike,

Yes, identical pix 525. Failover is connected using a LAN cable. Below is the ouput of the active pix.

Secondary pix- sh failover output

Secondary pix

Last Failover at: 08:35:42 WAT Mon Jul 31 2006

This host: Secondary - Active

Active time: 1101045 (sec)

Interface outside (x.x.x.x): Normal

Interface inside (172.20.100.2): Normal

Interface DMZ (172.18.254.254): Normal

Interface statelink (10.252.252.1): Normal

Interface ras-dmz (172.16.240.3): Normal

Interface GPRS (172.21.1.4): Normal

Other host: Primary - Standby (Failed)

Active time: 87585 (sec)

Interface outside (x.x.x.x): Normal

Interface inside (172.20.100.3): Normal

Interface DMZ (172.18.254.253): Link Down (Waiting)

Interface statelink (10.252.252.2): Normal

Interface ras-dmz (172.16.240.1): Normal

Interface GPRS (172.21.1.5): Normal

Stateful Failover Logical Update Statistics

Link : statelink

Stateful Obj xmit xerr rcv rerr

General 35852666 5 5283619 0

sys cmd 57006 0 77697 0

up time 10 0 2 0

xlate 395680 0 74172 0

tcp conn 35399585 0 5131348 886

udp conn 385 0 400 0

ARP tbl 0 0 0 0

RIP Tbl 0 0 0 0

Logical Update Queue Information

Cur Max Total

Recv Q: 0 1 865930

Xmit Q: 0 1 4826512

Secondarypix#

I couldnt enter the Primary pix as it is not active.

Thanks

Iso

[mpalardy]

Hello Iso,

Something goes wrong with the Standby unit.

DMZ interface. Might be cabling, pix DMZ interface or switch interface misconfigured.

You might Telnet the standby unit either on console port or using the FO inside IP. Check for any error on DMZ int (show interface).

Mike