Virtual IP for Management Interface

brad.morris — Tue, 14 Jan 2025 22:29:30 GMT

I have two firewalls in an HA configuration.

I need to be able to have one "virtual" ip address for the management interface of the active firewall.

For instance:

Firewall1 IP is 192.168.1.10

Firewall2 IP is 192.168.1.11

Virtual Address 192.168.1.9 points to 10 or 11, whichever one is active.

Has anyone else accomplished this and how did you do it?

Re: Virtual IP for Management Interface

TomYoung — Wed, 15 Jan 2025 05:25:27 GMT

You want two separate management IP addresses for each NGFW so that you can manage them separately. Some configuration items are not synced.

The IP address of the inside interface will always be on the active NGFW.

Thanks,

Tom