Please disregard this post. I dug through some more documentation on the
Cisco TAC site and found it.
>From the TAC Site:
Replicating the PIX Configuration
The two units must have the exact same configuration and must run the same
software version. This is easily accomplished, since configuration
replication occurs over the failover cable from the active unit to the
standby unit in the following ways:
When the standby unit completes its initial boot-up, the active unit
replicates its entire
configuration to the standby unit.
As commands are entered on the active unit, they are sent across to the
standby unit.
When you enter the write standby command on the active unit, you force the
entire configuration to memory on the standby unit.
The configuration replication does a "memory-to�memory" copy. Once that is
completed, you need to issue a write memory command on active unit to write
the configuration into the flash memory of standby unit. Both "sync started"
and "sync completed" console messages are displayed during this operation.
Large configurations may take awhile to transfer. If a switchover occurs
during replication, the new active PIX will have only a partial
configuration. The unit then reboots itself to recover the configuration
from the flash or re-sync by the other unit.
The configuration replication only occurs from the active unit to the
standby unit. Changes made to the standby unit do not pass to the active
unit.
-----Original Message-----
From: Chad Markley [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, April 17, 2001 2:09 PM
To: '[EMAIL PROTECTED]'
Subject: Configuration propagation to standby PIX
If I have two PIX in an active-standby configuration and I make a change to
the active unit; do I need to make the same changes to the standby unit or
should the changes propagate to the standby unit automatically via the
failover cable?
Thanks
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
