What is the value of a Backup Peer HA1 IP Address?

L2 Linker

What is the value of a Backup Peer HA1 IP Address?

In some of our firewalls I note a secondary IP address is assigned to a single HA group ID. 

What is the value of having this second IP? The problem it's introducing is that SNMP Traps

are getting gerated once or twice a day noting that the secondary IP address couldn't be 

reached. But there is never a problem with HA failing over - the primary is always reachable.


So what is the value of this secondary IP address (to me it just seems like noise potential.)

Anyone run into this situation? 





Enable HA
Group ID
Enable Config Sync
Peer HA1 IP Address
Backup Peer HA1 IP Address


L7 Applicator

Re: What is the value of a Backup Peer HA1 IP Address?

If for some reason HA1 link goes down and firewalls can't see each other over it any more then they both come active assumihg that peer is dead. Really bad situation.

For that reason HA1 bacup is used.

Usually it is best practice to use management interface as HA1 backup.

Enterprise Architect @ Cloud Carib www.cloudcarib.com
ACE (3.0, 5.0, 6.0, 7.0), PCNSE (6, 7), PCNSI
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!