Flip-flops on the PIX failover monitoring

[mchockalingam]

Hi All,

I see these logs from the PIX firewalls on 2 sites. It keeps happening quite frequently and then stops for a while and then starts again. I know that there are no problems with the switch ports where the PIX is connected to, but could it be hardware related to the PIX itself.

Oct 26 03:01:10 10.20.2.7 Oct 25 2004 22:43:31: %PIX-1-104004: (Secondary) Switching to OK.

Oct 26 03:01:10 10.20.2.7 Oct 25 2004 22:43:31: %PIX-1-105003: (Secondary) Monitoring on interface 2 waiting

Oct 26 03:01:10 10.20.2.7 Oct 25 2004 22:43:31: %PIX-1-105003: (Secondary) Monitoring on interface 1 waiting

Oct 26 03:01:25 10.20.2.7 Oct 25 2004 22:43:46: %PIX-1-104004: (Secondary) Switching to OK.

Oct 26 03:01:40 10.20.2.7 Oct 25 2004 22:44:01: %PIX-1-105004: (Secondary) Monitoring on interface 2 normal

Oct 26 03:01:40 10.20.2.7 Oct 25 2004 22:44:01: %PIX-1-105004: (Secondary) Monitoring on interface 1 normal

Oct 26 03:16:46 10.20.2.6 Oct 26 2004 12:00:36: %PIX-1-103003: (Primary) Other firewall network interface 0 failed.

Oct 26 03:16:55 10.20.2.7 Oct 25 2004 22:59:16: %PIX-1-104004: (Secondary) Switching to OK.

Oct 26 03:16:55 10.20.2.7 Oct 25 2004 22:59:16: %PIX-1-105003: (Secondary) Monitoring on interface 2 waiting

Oct 26 03:16:55 10.20.2.7 Oct 25 2004 22:59:16: %PIX-1-105003: (Secondary) Monitoring on interface 1 waiting

Oct 26 03:17:10 10.20.2.7 Oct 25 2004 22:59:31: %PIX-1-104004: (Secondary) Switching to OK.

Oct 26 03:17:25 10.20.2.7 Oct 25 2004 22:59:46: %PIX-1-105004: (Secondary) Monitoring on interface 2 normal

Oct 26 03:17:25 10.20.2.7 Oct 25 2004 22:59:46: %PIX-1-105004: (Secondary) Monitoring on interface 1 normal

Oct 26 03:17:39 10.20.2.6 Oct 26 2004 12:01:29: %PIX-1-103003: (Primary) Other firewall network interface 0 failed.

Oct 26 03:17:40 10.20.2.7 Oct 25 2004 23:00:01: %PIX-1-104004: (Secondary) Switching to OK.

Oct 26 03:17:40 10.20.2.7 Oct 25 2004 23:00:01: %PIX-1-105003: (Secondary) Monitoring on interface 2 waiting

Any help would be appreciated.

[rosario.garufi]

sh log on secondary

_____________________________________________________

Lost Failover communications with mate on interface 0

2004-11-04 03:56:33 Local6.Alert 10.1.1.3 Nov 04 2004 03:56:33: %PIX-1-105008: (Secondary) Testing Interface 0

2004-11-04 03:56:34 Local6.Alert 10.1.1.3 Nov 04 2004 03:56:34: %PIX-1-105009: (Secondary) Testing on interface 0 Passed

2004-11-04 03:57:34 Local6.Alert 10.1.1.3 Nov 04 2004 03:57:34: %PIX-1-105005: (Secondary) Lost Failover communications with mate on interface 0

2004-11-04 03:57:34 Local6.Alert 10.1.1.3 Nov 04 2004 03:57:34: %PIX-1-105008: (Secondary) Testing Interface 0

2004-11-04 03:57:38 Local6.Alert 10.1.1.3 Nov 04 2004 03:57:38: %PIX-1-105009: (Secondary) Testing on interface 0 Passed

2004-11-04 03:58:38 Local6.Alert 10.1.1.3 Nov 04 2004 03:58:38: %PIX-1-105005: (Secondary) Lost Failover communications with mate on interface 0

2004-11-04 03:58:38 Local6.Alert 10.1.1.3 Nov 04 2004 03:58:38: %PIX-1-105008: (Secondary) Testing Interface 0

2004-11-04 03:58:39 Local6.Alert 10.1.1.3 Nov 04 2004 03:58:39: %PIX-1-105009: (Secondary) Testing on interface 0 Passed

2004-11-04 03:59:39 Local6.Alert 10.1.1.3 Nov 04 2004 03:59:39: %PIX-1-105005: (Secondary) Lost Failover communications with mate on interface 0

2004-11-04 03:59:39 Local6.Alert 10.1.1.3 Nov 04 2004 03:59:39: %PIX-1-105008: (Secondary) Testing Interface 0

2004-11-04 03:59:51 Local6.Alert NYPIX1 Nov 04 2004 03:59:50: %PIX-1-105009: (Secondary) Testing on interface 0 Passed

2004-11-04 04:00:01 Local6.Alert 10.1.1.3 Nov 04 2004 03:59:59: %PIX-1-105003: (Primary) Monitoring on interface 0 waiting

2004-11-04 04:00:05 Local6.Alert NYPIX1 Nov 04 2004 04:00:05: %PIX-1-105003: (Secondary) Monitoring on interface 5 waiting

2004-11-04 04:00:05 Local6.Alert NYPIX1 Nov 04 2004 04:00:05: %PIX-1-105003: (Secondary) Monitoring on interface 4 waiting

2004-11-04 04:00:05 Local6.Alert NYPIX1 Nov 04 2004 04:00:05: %PIX-1-105003: (Secondary) Monitoring on interface 3 waiting

2004-11-04 04:00:05 Local6.Alert NYPIX1 Nov 04 2004 04:00:05: %PIX-1-105003: (Secondary) Monitoring on interface 2 waiting

2004-11-04 04:00:05 Local6.Alert NYPIX1 Nov 04 2004 04:00:05: %PIX-1-105003: (Secondary) Monitoring on interface 1 waiting

2004-11-04 04:00:05 Local6.Alert NYPIX1 Nov 04 2004 04:00:05: %PIX-1-105003: (Secondary) Monitoring on interface 0 waiting

2004-11-04 04:00:14 Local6.Alert 10.1.1.3 Nov 04 2004 04:00:14: %PIX-1-105004: (Primary) Monitoring on interface 4 normal

2004-11-04 04:00:20 Local6.Alert NYPIX1 Nov 04 2004 04:00:20: %PIX-1-105004: (Secondary) Monitoring on interface 5 normal

2004-11-04 04:00:20 Local6.Alert NYPIX1 Nov 04 2004 04:00:20: %PIX-1-105004: (Secondary) Monitoring on interface 4 normal

2004-11-04 04:00:20 Local6.Alert NYPIX1 Nov 04 2004 04:00:20: %PIX-1-105004: (Secondary) Monitoring on interface 3 normal

2004-11-04 04:00:20 Local6.Alert NYPIX1 Nov 04 2004 04:00:20: %PIX-1-105004: (Secondary) Monitoring on interface 2 normal

2004-11-04 04:00:20 Local6.Alert NYPIX1 Nov 04 2004 04:00:20: %PIX-1-105004: (Secondary) Monitoring on interface 1 normal

2004-11-04 04:00:20 Local6.Alert NYPIX1 Nov 04 2004 04:00:20: %PIX-1-105004: (Secondary) Monitoring on interface 0 normal

2004-11-04 04:00:29 Local6.Alert 10.1.1.3 Nov 04 2004 04:00:29: %PIX-1-105004: (Primary) Monitoring on interface 5 normal

2004-11-04 04:00:29 Local6.Alert 10.1.1.3 Nov 04 2004 04:00:29: %PIX-1-105004: (Primary) Monitoring on interface 3 normal

2004-11-04 04:00:29 Local6.Alert 10.1.1.3 Nov 04 2004 04:00:29: %PIX-1-105004: (Primary) Monitoring on interface 2 normal

2004-11-04 04:00:29 Local6.Alert 10.1.1.3 Nov 04 2004 04:00:29: %PIX-1-105004: (Primary) Monitoring on interface 1 normal