topic Re: HA Passive Link State Auto - Vwire Interfaces in General Topics

HA Passive Link State Auto - Vwire Interfaces

Metgatz — Thu, 13 Oct 2022 07:58:02 GMT

HA Passive Link State Auto - Vwire Interfaces

Hello good evening, thank you very much for the collaboration.

In HA I have configured the passive link in AUTO, in the layer 3 firewall, this works correctly and the secondary firewall interfaces appear as green UP. But in the equipment with "Vwire", in the secondary equipment they appear in red, that is to say down, is this correct? Is it because it is at the level of layer 2, therefore due to STP issues, the adjacent equipment does not negotiate with the interface, therefore it appears as down/red?

Thank you

Stay tuned to your comments

best regards

Re: HA Passive Link State Auto - Vwire Interfaces

BPry — Thu, 13 Oct 2022 14:55:47 GMT

@Metgatz,

This is expected behavior in a v-wire deployment. It's not actually really recommended to have layer2 links set to Auto in a deployment and is of little benefit during a failover outside of a layer3 link.

Re: HA Passive Link State Auto - Vwire Interfaces

Metgatz — Thu, 13 Oct 2022 15:48:41 GMT

Hello @BPry good afternoon, thank you very much for your time and cooperation.

OK, so that means that always, but always, even if it is in "Auto", when there are Vwire type interfaces will appear Down/RED, this expected behavior will always happen, that is Down/Red in the passive ?

Now then the recommendation is only to set Auto in Layer 3 links, that is L3 interfaces, L3 subinterfaces, Vlan interface with IP L3, but for layer two environments that is L2 interfaces or subinterfaces and Vwire deployment, the recommendation is not to use auto to avoid any network loop.

But example in interfaces or subinterfaces of L2, these if they appear in Up and green, when it is in Auto, but nevertheless the recommendation is not to use auto in these cases ?

Thank you for your support and I would appreciate if you could please rectify the above mentioned points.

I remain attentive to your comments.

Best regards