Virtual LAN Gateway for PIX failover architect

Jun 08, 2007 3 Replies

Hi, all,



I am going to set up a PIX515E failover architect, I know that I have to assign a LAN IP for each PIX ( that means two LAN default gateways for the LAN network after the PIXes ), so I want to know:


  1. can I configure a unique ( or a virtual ) IP for the LAN default gateway ? or I have to configure the LAN to use another LAN default gateway manually once the failover happens ?

Thanks so much in advance.



Cheers



It's true that each pix gets a unique IP, but the failover portion does not work the way you think. It the event of a failover the secondary pix fully assumes the identity of the primary pix and that includes it's IP address. Nothing on the LAN needs to change, no multiple gateways, none of that.

Bingo....Thanks so much indeed.

configure one pix completly before connecting the failover cable once connected the 'primary' pix should copy the configuration to the 'secondary' pix.

when the 'primary' pix fails the 'secondary' pix will assume the IP and MAC of the 'primary' unit. in other words the 'failover ip address' will change to the 'primary ip address' upon failover.

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required