topic Re: HA Active/active vwire different location in General Topics

HA Active/active vwire different location

gabriel_simatupang — Tue, 17 Apr 2018 09:46:10 GMT

Dear All,

We want to deploy 2 firewall PAN in 2 different location (Building) but same area/complex. Is there any ideal distance for HA link for both firewall? Is it need to directly or i can use via switch?

Can i deploy this topology? is there any suggest?

Re: HA Active/active vwire different location

BPry — Tue, 17 Apr 2018 18:50:16 GMT

@gabriel_simatupang,

Yes and No.

While your topology would work perfectly fine you would have to utilize aux-1/2 or the management interface for your Control Link, you would then need to configure an interface as an HA interface for your Data Link instead of the hsci interfaces.

Essentially it'll work perfectly fine, you just lose the ability to utilize the hsci interface.

Re: HA Active/active vwire different location

gabriel_simatupang — Fri, 27 Apr 2018 08:11:00 GMT

hai @BPry how if i do something like this below:

what i want to ask are:

1. is this topology will works for active/active vwire HA?

2. there is any concern with this topology?

3. HA link different building still recommended?

Re: HA Active/active vwire different location

BPry — Fri, 27 Apr 2018 13:33:00 GMT

@gabriel_simatupang,

That topology should would perfectly fine, but I am missing why you need vwire2 at all. From the diagram it looks as though if you lost the router in Building A or B, traffic would traverse to the other switch and out that buildings router right? So at that point simply maintaning vwire 1 and dropping vwire 2 should be sufficient, unless the switch in building A has direct access to the router in building B and I'm just not seeing that in the diagram.