Aggregate Interface Failover

MarkTan — Thu, 09 Jan 2014 17:44:34 GMT

Hello,

Is it possible to have two interfaces configured as aggregate interfaces in one AE group in way that if one interface goes down it does not force a failover to the backup firewall? Here's some background...

I have two PAs set up with high availability. I have configured e1/1 and e1/2 as aggregate interfaces joined to the aggregate group ae1. The aggregate group's IP address acts as our external IP address to our ISP. I want to set it up so that if either e1/1 or e1/2 fail, it does not force a failover to our second firewall. I just want the internet connection to remain active on firewall one going through the other port. Is this possible? Our HA configuration is active/passive. Please let me know.

Thanks,

Mark

Re: Aggregate Interface Failover

HULK — Mon, 13 Jan 2014 07:06:53 GMT

Hello Mark,

As per your requirement, It is possible to achieve through a monitoring profile on HA configuration. If we set the failover condition to "all" (default is Any) then it will trigger a failover only when both e1/1 and e1/2 will be down. Please find below an example.

Hope this helps.

Thanks

topic Aggregate Interface Failover in General Topics

Aggregate Interface Failover

Re: Aggregate Interface Failover