[c-nsp] How to tell if a PIX is UR or FO

[Jason Lixfeld]

On 18-Jun-06, at 2:32 AM, Steve Feldman wrote:

>>> Question is, how do you tell which box is the FO and which box is  
>>> the
>>> UR.  As far as I recall, the FO is just a UR with a different  
>>> license
>>> key, correct?  Can a show ver tell this?  Does anyone have an  
>>> example
>>> of what the output would look like on a UR vs a FO box?
>
> In 6.3(5), "show version" says either
>     This PIX has an Unrestricted (UR) license.
> or
>     This PIX has a Failover Only (FO) license.
> near the end of the output.

My 6.2(1) PIXen do not seem to have that information.  All it says is  
"Failover: enabled" under Licensed features.

(primary PIX)
# show version

Cisco PIX Firewall Version 6.2(1)
Cisco PIX Device Manager Version 2.0(1)

Compiled on Wed 17-Apr-02 21:18 by morlee

PIX1 up 50 days 22 hours

Hardware:   AL440LX, 384 MB RAM, CPU Pentium II 300 MHz
Flash i28F640J5 @ 0x300, 16MB
BIOS Flash AT29C257 @ 0xfffd8000, 32KB

0: ethernet0: address is 00a0.c996.9ab3, irq 11
1: ethernet1: address is 00a0.c98c.e533, irq 15
2: ethernet2: address is 00a0.c9a2.1a2f, irq 10
3: ethernet3: address is 0090.271a.02bf, irq 9
Licensed Features:
Failover:           Enabled
VPN-DES:            Enabled
VPN-3DES:           Disabled
Maximum Interfaces: 6
Cut-through Proxy:  Enabled
Guards:             Enabled
URL-filtering:      Enabled
Inside Hosts:       Unlimited
Throughput:         Unlimited
IKE peers:          Unlimited
<snip>

(failover pix)
# show ver

Cisco PIX Firewall Version 6.2(1)
Cisco PIX Device Manager Version 2.0(1)

Compiled on Wed 17-Apr-02 21:18 by morlee

PIX1 up 50 days 23 hours

Hardware:   SE440BX2, 384 MB RAM, CPU Pentium II 350 MHz
Flash i28F640J5 @ 0x300, 16MB
BIOS Flash AT29C257 @ 0xfffd8000, 32KB

0: ethernet0: address is 00a0.c9db.f538, irq 11
1: ethernet1: address is 0090.2734.77d8, irq 15
2: ethernet2: address is 00a0.c9f1.ef8c, irq 10
3: ethernet3: address is 0090.2713.d870, irq 9
Licensed Features:
Failover:           Enabled
VPN-DES:            Enabled
VPN-3DES:           Disabled
Maximum Interfaces: 6
Cut-through Proxy:  Enabled
Guards:             Enabled
URL-filtering:      Enabled
Inside Hosts:       Unlimited
Throughput:         Unlimited
IKE peers:          Unlimited
<snip>