PIX 520 Failover

[mowtnman]

I have 2 PIX 520's setup with failover between the 2. If you unplug an interface that is in a switch or hub this will cause failover between the two... Failovers kill connections. I need to move the connections into a new switch without causing a failover between the 2 devices. Is there a way to do this? The interfaces I need to move are neither the inside or outside interface of the Pix...

Thanks in advance.

[r-simpson]

You would have to enable stateful failover to maintain the connection states during the failover event.

[klouthan]

You have to dedicate a link to pass the stateful information.

Then you use a crossover cat5 cable to link the two interfaces together.

Then apply something like below :

nameif ethernet4 fail-interface security10

failover link fail-interface

ip address fail-interface 10.254.254.249 255.255.255.252

failover ip address fail-interface 10.254.254.250

failover link fail-interface