Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Computing > Cisco > Enabling Failover on Primary PIX goes standby.

Reply
Thread Tools

Enabling Failover on Primary PIX goes standby.

 
 
Tom Pouce
Guest
Posts: n/a
 
      11-09-2005
I have to connect 2 PIX's (515E) with FAILOVER via LAN

After configuring all failover IP addresse and connecting the FAILOVER
link to the switch I enabled FAILOVER on the PIX.
The PIX goes immediately in standby mode. I thought I should stay active
because it's the primary and he couldn't reaching the secondary.

Any suggestion or solution?


pix1(config)# sh failover
Failover On
Serial Failover Cable status: My side not connected
Reconnect timeout 0:00:00
Poll frequency 15 seconds
Last Failover at: 22:57:07 CET Mon Nov 7 2005
This host: Primary - Standby
Active time: 0 (sec)
Interface outside (x.y.9.14): Normal (Waiting)
Interface inside (x.y.14.46): Normal (Waiting)
Interface intf2 (0.0.0.0): Normal (Shutdown)
Interface intf3 (0.0.0.0): Normal (Shutdown)
Interface intf4 (0.0.0.0): Normal (Shutdown)
Other host: Secondary - Standby
Active time: 0 (sec)
Interface outside (x.y.9.10): Unknown (Waiting)
Interface inside (x.y.14.45): Unknown (Waiting)
Interface intf2 (0.0.0.0): Unknown (Shutdown)
Interface intf3 (0.0.0.0): Unknown (Shutdown)
Interface intf4 (0.0.0.0): Unknown (Shutdown)

Stateful Failover Logical Update Statistics
Link : Unconfigured.


LAN-based Failover is Active
interface LANFAIL (192.168.80.1): Normal, peer (192.168.80.2):
Unknown

 
Reply With Quote
 
 
 
 
gwrowe@gmail.com
Guest
Posts: n/a
 
      11-09-2005
What does "show version" tell you? Are you on the FO box? You might
need to change the console to the other PIX

 
Reply With Quote
 
 
 
 
gwrowe@gmail.com
Guest
Posts: n/a
 
      11-09-2005
Also, I believe you need a third link for lan based FO.

 
Reply With Quote
 
Tom Pouce
Guest
Posts: n/a
 
      11-09-2005
http://www.velocityreviews.com/forums/(E-Mail Removed) wrote:
> Also, I believe you need a third link for lan based FO.
>

This is the output of the primary PIX.
I used interface ethernet5 for the failover link
 
Reply With Quote
 
Martin Bilgrav
Guest
Posts: n/a
 
      11-09-2005

"Tom Pouce" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> I have to connect 2 PIX's (515E) with FAILOVER via LAN
>
> After configuring all failover IP addresse and connecting the FAILOVER
> link to the switch I enabled FAILOVER on the PIX.
> The PIX goes immediately in standby mode. I thought I should stay active
> because it's the primary and he couldn't reaching the secondary.
>
> Any suggestion or solution?
>
>
> pix1(config)# sh failover
> Failover On
> Serial Failover Cable status: My side not connected
> Reconnect timeout 0:00:00
> Poll frequency 15 seconds
> Last Failover at: 22:57:07 CET Mon Nov 7 2005
> This host: Primary - Standby
> Active time: 0 (sec)
> Interface outside (x.y.9.14): Normal (Waiting)
> Interface inside (x.y.14.46): Normal (Waiting)
> Interface intf2 (0.0.0.0): Normal (Shutdown)
> Interface intf3 (0.0.0.0): Normal (Shutdown)
> Interface intf4 (0.0.0.0): Normal (Shutdown)
> Other host: Secondary - Standby
> Active time: 0 (sec)
> Interface outside (x.y.9.10): Unknown (Waiting)
> Interface inside (x.y.14.45): Unknown (Waiting)
> Interface intf2 (0.0.0.0): Unknown (Shutdown)
> Interface intf3 (0.0.0.0): Unknown (Shutdown)
> Interface intf4 (0.0.0.0): Unknown (Shutdown)
>
> Stateful Failover Logical Update Statistics
> Link : Unconfigured.
>
>
> LAN-based Failover is Active
> interface LANFAIL (192.168.80.1): Normal, peer (192.168.80.2):
> Unknown
>


looks like you do not have layer-2 connection between the two FO interfaces.
To help out more, please also post the interface and failover part of your
config.

You need to have a switch inbetween, and not just a crossover UTP.
Also it might be because of the failover IP you have issued.
Alternatively, you can enable debug, and manually active failover and watch
the output.
(type failover active on the primary host)

HTH
Martin


 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
cisco ASA/PIX failover and VPN, failover IP access problem Pit Cisco 0 08-27-2008 03:34 PM
referencing a failover datasource if primary DB server is down? ASP .Net 1 05-16-2006 09:27 PM
Failover from primary router to secondary router with HSRP shane.dammen@gmail.com Cisco 1 10-15-2005 03:58 PM
Stateful NAT failover = yes. Stateful CBAC failover = ???? Alec Waters Cisco 0 06-09-2004 01:38 PM
failover license to primary Tony Cisco 1 11-10-2003 08:45 PM



Advertisments