User cannot get secondary PIX Firewall ...

421

Views

Helpful

Comments

edited on: ‎03-08-2019 ‎06:05 PM

Core issue

The primary PIX Firewall shows the interfaces on the secondary PIX with an IP address of 127.0.0.1. The configuration does not have failover ip address commands.

Resolution

To resolve this issue, an IP address must be assigned to each interface on both the primary and secondary PIX Firewall.

To assign IP addresses to the interfaces of the secondary PIX Firewall, issue the failover ip address if_name ip_addr command.

Note: This command must be issued from the active PIX Firewall.

This is an example of this command:

failover ip address outside 192.168.1.2

failover ip address inside 10.10.10.2

failover ip address intf2 172.16.1.2

For more information on configuring failover, refer to Using PIX Firewall Failover.

PIX Software Version

PIX version 5.0

PIX version 6.3

PIX version 5.1

PIX version 5.2

PIX version 5.3

PIX version 6.0

PIX version 6.1

PIX version 6.2

Latest Contents

Configuring outbound traffic on SSH to specific IP addresses

Created by RonTrello31209 on 07-06-2020 04:34 AM

Hi, very new to this and unfortunately in a position where I need to try and get some config working without having learned all the basics and core concepts yet. I'm using the ASDM for configuration. What I am trying to achieve - An internal IP... view more

Multiple certificates / Trustpoints / crypomap entries for t...

Created by swish78 on 07-06-2020 04:29 AM

Hi I have a situation where I need to peer with a single device: I need to run multiple tunnels, each with a unique certificate, and unique interesting traffic. For example crypto map CRYPTO-MAP 1 match address XXXXXXXXcrypto ma... view more

Packet loss/latency after Firewall update

Created by MBA_ on 07-06-2020 04:23 AM

Good morning all,It is the first time that I post on this forum! I need your help to resolve a problem that occurs after updating the firewall from version 9.7 to 9.14.1the firewall is an asa 5525. the problem is that, at random, a time is added... view more

ISE - Guest sponsor portal

Created by surenkanna on 07-06-2020 04:17 AM

Hi Guys, I'm running a small ISE deployment with one Admin and policy node. Lately I have created a custom "guest sponsor portal".When I try to test the portal via "Portal Test URL" it open up the URL for admin node instead of the policy node "(https... view more

ASA 5545-X & 5508-X SFR Modules

Created by georgehewittuk1 on 07-06-2020 04:07 AM

Hi All, I'm getting slightly confused and wanted to confirm that these are indeed using software SFR modules i.e. there is no physical module therefore the physical resources are consuming what is on the ASA? So resources can be taken to compromise A... view more