08-25-2009 01:42 AM - edited 03-11-2019 09:09 AM
We have Primary PIX515 with Unrestricted License and Standby PIX515 with just Failover license in Active / Standby mode.
A few days ago the Failover unit failed hardware wise.
We raised an RMA and got a spare from Cisco which happen to come with with code version 6.3(3).
My customer and I are worried to put
6.3(3) as the Failover Unit, because the Primary is running 6.3(1).
But I cannot find any 6.3(1) or for that matter any 6.x code on Cisco Site.
Can someone point me to where I can get access to 6.3(1) code on Cisco Systems.
I have full CCO access and CCO login ID and password. We are Cisco's Gold Partner.
Second question:
================
When we connect the spare Failover unit to the Primary will the config automatically sync from the Active Primary to this new Failover unit or do we have to do someting like
"write standby" on the primary unit for the config to sync across.
BAsically I am looking for a step by step procedure on replacing the Failover PIX of a PIX pair.
08-25-2009 02:26 AM
1) I am not sure that 6.3(1) is even under support anymore
2) the easiest way to get the version, is tftp "off" the current "Failover" unit - which should currently be the "Primary" unit.
3) The units MUST have the same version of PIX code for standby/failover to work.
4) When they have the same code - and the serial sync cable is connected and both devices can see each other - then read the below link.
http://www.cisco.com/en/US/docs/security/pix/pix63/configuration/guide/failover.html#wp1014756
HTH>
08-26-2009 02:41 PM
Tried to copy the IOS from the primary firewall as per below, but this fails. It looks like the IOS command set doesn't support the backing up of the image itself.
PIX#copy flash:/image.bin tftp://10.254.251.11/image.bin
Usage: copy capture:
copy http[s]://[
flash[:[image | pdm]]
copy tftp[:[[//location][/pathname]]] flash[:[image | pdm]]
08-26-2009 04:01 PM
From the help text, it appears that you can only copy a capture file from the PIX to a TFTP server, not the image.
A "dir flash:" fails so I did a "dir flashfs" and this shows three files but doesn't name them.
I've removed the cover on the PIX and the only removable boards are the DRAM (2 slots X 32Mb) I can't see anything for the flash - I suspect it's built into the motherboard ???
PIX#copy flash:image.bin tftp://10.254.251.11/image.bin
Usage: copy capture:
copy http[s]://[
flash[:[image | pdm]]
copy tftp[:[[//location][/pathname]]] flash[:[image | pdm]]
PIX#dir flash
Type help or '?' for a list of available commands.
PIX#show flashfs
flash file system: version:3 magic:0x12345679
file 0: origin: 0 length:1925176
file 1: origin: 1966080 length:28982
file 2: origin: 0 length:0
file 3: origin: 2097152 length:3126944
file 4: origin: 0 length:0
file 5: origin:16646144 length:308
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: