PIX 520 Failover... How does it work?

[mowtnman]

I know that when using HSRP for routers and switches that the HSRP that will use a virtual IP and MAC address that it uses in case of hardware failure.

With a PIX 520 how exactly does he failover work?

Is it similar to the way HSRP functions-i.e. virtual IP and MAC... or ???

Any comments are appreciated

[jose.calvillo]

Please see the following link, it discusses everything concerning PIX failover.

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_61/config/failover.htm

[mowtnman]

Thanks- this helps clerify.

[pmoulay]

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_v50/config/advanced.htm

You are correct in your comments. Still the Hello protocol working behind the scenes. From a practical point of view, all the failover configuration is done on the primary unit. No need to physically be on the second unit. Make sure you have an extra IP addres for the failover unit. USe the failover ip address command for the different interfaces.