tered on the primary PIX. The entries in bold are the default configuration entries, and do not need to be entered manually: failover ip address outside 10.0.0.2 failover ip address inside 192.168.1.2 no failover ip address intf2 no failover ip address intf3 no failover ip address intf4 failover ip address Failover 192.168.255.2 To configure the failover interface to be used for stateful failover, use the failover link command: PIX(config)# failover link Failover Interfaces that are not in use should always be placed in the shutdown state when employing PIX failover. Interfaces that are active, but not cabled, can trigger a failover, as the PIX will try unsuccessfully to con- tact the failover address if one was previously configured. Monitoring Failover The primary means of showing failover status is the show failover command: PIX# sho failover Failover On Cable status: Normal Reconnect timeout 0:00:00 Failover Poll frequency 15 seconds Last Failover at: 22:06:24 UTC Sat Dec 16 2006 This host: Primary - Active Active time: 18645 (sec) Interface outside (10.0.0.1) Normal Interface inside (192.168.1.1) : Normal Interface intf2 (0.0.0.0): Link Down (Shutdown) Interface intf3 (0.0.0.0): Link Down (Shutdown) Interface intf4 (0.0.0.0): Link Down (Shutdown) Interface Failover (192.168.255.1) : Normal Other host: Secondary - Standby Active time: 165 (sec) Interface outside (10.0.0.2) : Normal Interface inside (192.168.1.2) : Normal Interface intf2 (0.0.0.0): Link Down (Shutdown) Interface intf3 (0.0.0.0): Link Down (Shutdown) Interface intf4 (0.0.0.0) Link Down (Shutdown) Interface Failover (192.168.255.2): Normal Stateful Failover Logical Update Statistics Link : Failover Stateful Obj General sys cmd up time xlate tcp conn udp conn ARP tbl RIP Tbl Logical Update Queue Information Total Recv 0: Xmit 0: This command shows you the state of both of the firewalls in the pair, as well as sta- tistics for the stateful failover link. If this link is incrementing errors, you may lose connections during a failover. Remember that