Hello,
I have a Active/Passive (Primary/Standby) Dual Firewall configuration into which I need to install a new PIX-1FE module. I already have a PIX-4FE in the unit with two available slots. Believe it or not I'm currently using all 6 of the interfaces and need one (1) more!
My questions are as follows:
1. What is the easiest way to upgrade this configuration? Break the failover cable, install the card in the standby unit, verify operation, down the primary unit, make the standby active, and repeat procedure for the primary unit?
2. Can I have a PIX-4FE & PIX-1FE in the same chassis? What are the slots I need to install into? (I think it makes a big difference where you put the new card!)
3. Do I have enough memory to handle both cards? I'm currently running around 250 Meg available on average (normal usage. During backups it's higher!)
4. What is the best way to get into the chassis? Mine is rack mounted and most likely will be a bear to get at (isn't that always the case?)
Here's what I've got for equipment:
Cisco PIX Firewall Version 6.1(1)
Hardware: PIX-525, 256 MB RAM, CPU Pentium III 600 MHz
Flash E28F128J3 @ 0x300, 16MB
BIOS Flash AM29F400B @ 0xfffd8000, 32KB
0: ethernet0: address is 0007.xxxx.xxxx, irq 10
1: ethernet1: address is 0007.xxxx.xxxx, irq 11
2: ethernet2: address is 00e0.xxxx.xxxx, irq 11
3: ethernet3: address is 00e0.xxxx.xxxx, irq 10
4: ethernet4: address is 00e0.xxxx.xxxx, irq 9
5: ethernet5: address is 00e0.xxxx.xxxx, irq 5
Licensed Features:
Failover: Enabled
VPN-DES: Enabled
VPN-3DES: Enabled
Maximum Interfaces: 8
Cut-through Proxy: Enabled
Guards: Enabled
Websense: Enabled
Inside Hosts: Unlimited
Throughput: Unlimited
ISAKMP peers: Unlimited
Any comments/suggestions would be greatly appreciated.
Thanks,
Ron Ostiguy
rostiguy@steelpoint.com
