cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1085
Views
0
Helpful
3
Replies

FWSM Active/Standby IP Address

hiepnguyenho
Level 1
Level 1

Hello everyone,

I have 2 FWSM running on 2 Cat6500 chassis, they work as a Active/Stanby group. Firewall mode is transparent.

Here is the configuration for Interface:

interface Vlan9

description **Inside 10.98.1.x**

nameif inside3

bridge-group 9

security-level 100

!

interface Vlan209

description **Outside 10.98.1.x**

nameif outside3

bridge-group 9

security-level 0

!

interface BVI9

ip address 10.98.1.247 255.255.255.0 standby 10.98.1.248

!

HA is running well, but I can not ping the standby IP (10.98.1.248). So what could be the problem?

3 Replies 3

Anu M Chacko
Cisco Employee
Cisco Employee

Hi,

What version are you running on the FWSM? Where are you trying to ping from? Could you verify the SVI configuration on the switch with standby FWSM blade?

Let me know.

Regards,

Anu

Dear Anu,

I just tried to ping from FWSM Active and the running version is 4.0(6).

I run VRRP on the switch. Thank you.

Hi Hiep,

Could you check if icmp traffic is permitted on the standby FWSM?

It would be great if you can post the "sh run" from both the FWSMs here.

Regards,

Anu 

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: