Letting off steam

[JoyriderUK]

Dontcha just hate when you come into a new company and it its a mess.

Our PIX configuration.. being a shining example of one.

4 vendors, 1 ISP and 2 technicians couldn't fix a problem we were having.

Not NATing packets for a particular destination. With some help.. I got there. But there is a looming cloud on the horizon. They bought a PIX and a failover unit.. but just didn't bother installing the failover till the main configuration works.

Main configuration works now.. but guess what.. the failover won't install... why... ? I'll tell you why.. they bought a RESTRICTED PIX. I've been quietly sobbing in the corner.. trying to control the fist of death.

To the point:-
--------------
How much pain is there going from the restricted to unrestricted?

How much pain is there going from stand alone to failover mode?

Any gotchas?

 

[baddos]

No pain at all... You just need the new key from Cisco when you buy it that will flip it into UR. In PIX 6.X you can do it w/ the "activation-key" command. If you are running a version old than 6.X then you have to reload your PIX OS or upgrade it to enter the activation key.

When you upgrade to UR, you get more memory and a VPN accelerator card. You will have to take down the PIX to install them, but they just snap right in without any additional configuration needed.

As far as configuring Failover, it's easy. It can be done w/o interuption as long as your running in UR mode.

-Bad Dos