pix failover

[elettronicaspa]

Hi, I have two Pix 515E in statefull failover between them.

the failover it works correctly but switch from primary to secondary without reason or at least I don't detect it.

Please if someone have a solution for my problem answer me soon because I have many troubles

thanks

[nkhawaja]

Hi,

Two possibilites, any interface on primary is flapping or going down, or the primary firewall itself is crashing.

Question: if the secondary becomes active, does it stay active or it flaps too?

YOu need to collect syslog information from the PIX. What PIX version is it? Can you type "show crash" and see if there is any output, if there is , please provide

Thanks

Nadeem

[elettronicaspa]

Hi Nadeem and thanks for your answer.

The failover unit flaps too but I can't see the reason.

I try to collect syslog messages.

The pix version is 6.3(1).

the show crash output is in attachments.

Thank you for your interesting

bye.

[scoclayton]

This appears to be related to a bug in the PIX code - CSCea72383 - PIX crashes in isakmp receiver thread. I would suggest upgrading to 6.3(4) on both units and checking the stability. This defect has been fixed and verified.

Let us know how it goes.

Scott

[elettronicaspa]

thank you for your answer I'll try to upgrade the ios and check it.

Excuse for my english.

thanks

bye

david