Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
The standby address should be unique to the failover firewall. You should not use an IP address already in use by another device. And yes, it is possible to ping the standby ip address, if icmp is allowed on that interface. i.e. "icmp permit [] ...
I haven't tried this, but I would say no. The command reference states the 501 and 506 can be a eVPN client OR eVPN server.From the 6.3 comand reference:The PIX 501 and PIX 506/506E are both Easy VPN Remote and Easy VPN Server devices. The PIX 515/5...
The reset-O means the tcp reset packet came from the far end connection. I do not think it's the firewall.Are you running ip inspection on the internet router?Can you run "show conn foreign "? Check and see if you're PATing most of the connections....
