From: Alexei Monastyrnyi (alexeim@orcsoftware.com)
Date: Sun Feb 03 2008 - 13:00:57 ARST
Hi Tim.
I have it over LAN for 7.2.3, all works well.
interface Ethernet0
nameif outside
security-level 0
ip address pix-prim 255.255.255.240 standby pix-bkp
!
interface Ethernet1
nameif inside
security-level 100
ip address pix-prim-in 255.255.255.240 standby pix-bkp-in
interface Ethernet5
description LAN/STATE Failover Interface
failover
failover lan unit primary/secondary
failover lan interface rescue Ethernet5
failover lan enable
failover polltime unit 5 holdtime 15
failover key FailoverKey
failover link rescue Ethernet5
failover interface ip rescue pix-prim-rescue 255.255.255.0 standby
pix-bkp-rescue
Are you gonna use some of those new features on 8.0 branch?
I would consider then going for the latest which is 8.0.3 for now.
HTH,
A.
Tim Curci wrote:
> I have two PIX-515Es that I have configured for Lan based failover. I do not
> have the serial cable connected between them when I do "show failover" I get:
>
> pix1# show failover
> Failover On
> Cable status: My side not connected
> Failover unit Secondary
> Failover LAN Interface: N/A - Serial-based failover enabled
> Unit Poll frequency 15 seconds, holdtime 45 seconds
> Interface Poll frequency 5 seconds, holdtime 25 seconds
> Interface Policy 1
> Monitored Interfaces 2 of 250 maximum
> Version: Ours 8.0(2), Mate Unknown
> Last Failover at: 21:53:04 UTC Feb 2 2008
> This host: Secondary - Active
> Active time: 870 (sec)
> Interface outside (209.165.200.225): Link Down (Waiting)
> Interface inside (192.168.10.1): Link Down (Waiting)
> Other host: Primary - Not Detected
> Active time: 0 (sec)
> Interface outside (209.165.200.226): Unknown (Waiting)
> Interface inside (192.168.10.2): Unknown (Waiting)
>
> Stateful Failover Logical Update Statistics
> Link : Unconfigured.
>
> I do not want to use serial based failover and have no idea how to get rid of
> this. Show I re-image the devices?
>
> I have LAN based failover configured of both PIX devices.
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Sat Mar 01 2008 - 16:54:47 ARST