Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
512
Views
0
Helpful
1
Replies

515 FO

timtron
Level 1
Level 1

‎07-05-2001 12:17 PM - edited ‎03-08-2019 08:26 PM

I have 2 515's setup in a stateful failover config. I have dedicated interfaces connected with a crossover cable used for the stateful interface. However my outside interfaces keep trying to exchange ?hello? packets and it is triggering the PIX-IDS as spoofed IP addresses. Is this the normal behavior for them to exchange packets on the non-failover link?

Labels:
0 Helpful
1 Reply 1

smalkeric
Level 6
Level 6

‎07-10-2001 09:53 AM

Yes. The Hello packets (or lack of them) is the triggering mechanism for failover. I can see how IDS may not like that though. You might talk to Cisco about that.

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents