PIX FAILOVER

[giuliano]

Hi.

I have a question about failover with 2 pix 515E.

Can i configure the two pix like a IOS hsrp?

I need that active pix has a configuration different from pix standby, but in event of failure pix 2 get virtual ip and mac and goes on.

(Reading manuals i learned that active pix send it's configuration to pix 2)

Thanks.

G.

[steve.barlow]

In PIX failover, one PIX will be active and the other is standby, like HSRP. They won't be active-active. However, the two PIX configs will need to be the same (except for the standby IP will be different). Once the failure occurs, the standby PIX will take over the IP and mac - thus becoming active.

But the two configs need to be the same, otherwise when the failover occurs your new active PIX will have a different config than the old active PIX. Configs aren't forced over on failovers (they are pushed only when you enter the command to do so), only the IP and MAC are exchanged.

Hope it helps.

Steve