topic Re: Can a A/A Floating IP be set to the interface IP ? in General Topics

Can a A/A Floating IP be set to the interface IP ?

dbrenipc — Mon, 19 Aug 2013 15:38:49 GMT

Hello - In the VRRP world, I can have 2 devices active with a single IP (VRRP IP address ) active only on 1.

I have a situation where I need to vsys a box (L3 & Vwire) The vwires are replacing Tipping point IDP's , with active traffic, so I need Active Active- fine..

the FW vsys only needs a single address active in one interface network at any time. So I really DO NOT need the active active, but have to because it is system wide.

Question...

Can I set Virtual Addresses on the DeviceID 0 , to be the same as the interfaces, and then set Dev0 prio=0 and dev 1 prio=255.

I believe the result will be only a single ip active on dev id 0, unless link fails, etc.

Thank you in advance, I have it configured, but cannot test. Just curious if anyone has done it.

regards,

Don

Re: Can a A/A Floating IP be set to the interface IP ?

UhMayYeah — Tue, 20 Aug 2013 08:16:48 GMT

I was able to get this working using the interface address:

admin@50-PA-5020(active-primary)> show interface logical | match 192.168

ethernet1/4 19 1 trust-L3 vr:default 0 192.168.50.1/23

admin@50-PA-5020(active-primary)> show high-availability virtual-address | match 192.168

192.168.50.1 Active:yes Type:floating

admin@51-PA-5020(active-secondary)> show high-availability virtual-address | match 192.168

192.168.50.1 Active:no Type:floating

IP-CONFIG

Connection-specific DNS Suffix . :

IP Address. . . . . . . . . . . . : 192.168.50.206

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.50.1

Results:

Reply from 192.168.50.1: bytes=32 time<1ms TTL=64

Reply from 192.168.50.1: bytes=32 time<1ms TTL=64

Pinging 4.2.2.2 with 32 bytes of data:

Reply from 4.2.2.2: bytes=32 time=25ms TTL=57

Re: Can a A/A Floating IP be set to the interface IP ?

dbrenipc — Fri, 06 Sep 2013 17:38:43 GMT

Thank you very much. I actually was able to get the required addresses from the customer so I didn't have to use the same address.. But this is good to know.

thank you,

Don