Denied Failover Traffic

[s-beavers]

On the secondary PIX, one of the inside interfaces is showing failed. In doing a failover reset, the device clears. Maybe thrity seconds later, it fails again. I turned on failover logging and got the following:

May 19 22:44:00 Failover/Failover May 19 2003 20:41:00: %PIX-3-106010: Deny inbound protocol 105 src Primary:10.193.249.1 dst inside:10.193.249.2

May 19 22:44:00 Failover/Failover May 19 2003 20:41:00: %PIX-3-106011: Deny inbound (No xlate) protocol 105 src Primary:10.193.249.1 dst Primary:10.193.249.2

May 19 22:44:05 Failover/Failover May 19 2003 20:41:05: %PIX-3-106010: Deny inbound protocol 105 src Primary:10.193.249.1 dst inside:10.193.249.2

Is it possible to add a ACL to allow this traffic? Thanx.

[sampathsr]

Probably the interface hardware settings for the inside interface have a mismatch.. one set to auto and the other set to a fixed value etc.. try changing any 'auto' settings to a fixed setting...

ofcourse the age-old question comes up: from when is the problem occuring?? did anything change to trigger this problem?

Best regards / Sampath.