What is the value of a Backup Peer HA1 IP Address?

Shuttermed — Sun, 25 Nov 2018 00:03:53 GMT

In some of our firewalls I note a secondary IP address is assigned to a single HA group ID.

What is the value of having this second IP? The problem it's introducing is that SNMP Traps

are getting gerated once or twice a day noting that the secondary IP address couldn't be

reached. But there is never a problem with HA failing over - the primary is always reachable.

So what is the value of this secondary IP address (to me it just seems like noise potential.)

Anyone run into this situation?

Enable HA
x
Group ID
1
Description

Mode
active-passive
Enable Config Sync

Peer HA1 IP Address
172.19.6.1
Backup Peer HA1 IP Address
172.19.7.1

Re: What is the value of a Backup Peer HA1 IP Address?

Raido_Rattameister — Sun, 25 Nov 2018 08:11:55 GMT

If for some reason HA1 link goes down and firewalls can't see each other over it any more then they both come active assumihg that peer is dead. Really bad situation.

For that reason HA1 bacup is used.

Usually it is best practice to use management interface as HA1 backup.

topic What is the value of a Backup Peer HA1 IP Address? in General Topics

What is the value of a Backup Peer HA1 IP Address?

Re: What is the value of a Backup Peer HA1 IP Address?