Pix failover upgrade

[Ernesto Fernandez gomez-pinto]

Hello,

How i upgrade the image software of two Pix in failover (one UR and other FO) without loss of conection?.

How work the FO unit if it isn´t conected to the UR unit?, for example, i have my two pixes working and the UR fail and i have replaced it, in this moment i have the FO working only, there is a problem if the FO is reloaded in this moment, the FO unit boot and it don´t detect a UR unit, can the FO unit work without problem until i replace the UR unit and conect it?.

Regards and sorry by my poor english.

[pmays]

You will upgrade the UR, (the FO is now the active PIX), then upgrade the FO.

Here is a link:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094a5d.shtml#failover

[Ernesto Fernandez gomez-pinto]

I´m sorry but this procedure isn´t whitout loos of conection. The step 9 tell me that while the primary boot i have a loss of conection.

Regards.

[pmays]

true. I know of no supported way to do this with zero downtime.

I have seen messages where people have tried but it resulted in a reboot anyway. I would not risk it.

I know that this is a current feature request, but I have not seen any messages stating it has been committed.

Sorry...

[wmostafa]

yes you can do this ...

first: make sure that the failover cable is connected to the FO pix. (i know that the other end will not be connected becuase you dont have the UR pix untill now ) but it is ok .. the FO will reboot fine.

second: enter the FO pix configuration mode, and issue the command "Failover Active"

Now you will have the FO pix working fine, although the UR is not connected.

try it , a nice trick :)

see you