Changing pix configs when failover is configured

Changing pix configs when failover is configured

Secure Home | Search | About
 Networking Firewalls    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Changing pix configs when failover is configured Newbie72 06-29-2006
Posted by Newbie72 on June 29, 2006, 10:28 am
If you were  Registered and logged in, you could reply and use other advanced thread options
I just started working for a different company. They have redundant pix
525 firewalls connected via serial.

They have decided to change internet carriers due to the divide between
Verizon and Level 3. Because of the divide they would have lost their
current public ip subnet and found cheaper service through a company
called global crossing which means they are also changing ip addresses.

Here is the question: I believe I know the answer already but I just
wanted to check and make sure I am not wrong.

Do I need to change the config on both pix's to reflect the public IP
address change?

Thanks,

Steve


Posted by Spack on July 4, 2006, 12:18 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Newbie72 wrote on 29 Jun 2006 07:28:22 -0700:

> I just started working for a different company. They have redundant pix
> 525 firewalls connected via serial.
>
> They have decided to change internet carriers due to the divide between
> Verizon and Level 3. Because of the divide they would have lost their
> current public ip subnet and found cheaper service through a company
> called global crossing which means they are also changing ip addresses.
>
> Here is the question: I believe I know the answer already but I just
> wanted to check and make sure I am not wrong.
>
> Do I need to change the config on both pix's to reflect the public IP
> address change?

No. The failover unit gets it's config from the primary unit automatically.

Dan



Similar ThreadsPosted
Can a software firewall be configured so that it doesn't take effect when a specific user id is logged on? April 8, 2008, 7:36 pm
Checkpoint FW1 failover requirements? February 23, 2005, 12:39 am
Netscreen Failover question May 11, 2005, 11:37 pm
Cisco ASA 5500 WAN failover September 20, 2005, 7:49 am
Cisco VPN Failover setup May 1, 2006, 5:11 pm
Cisco Failover License problem August 4, 2004, 1:48 am
Failover mode on Arkoon Firewall March 8, 2005, 4:07 pm
Help regarding changing program March 2, 2005, 7:27 pm
Changing iptables on the fly October 14, 2006, 6:19 am
Route table changing application May 13, 2005, 7:13 am

The site map in XML format XML site map

Contact Us | Privacy Policy