Aggregate Interface Failover

[MarkTan]

Hello,

Is it possible to have two interfaces configured as aggregate interfaces in one AE group in way that if one interface goes down it does not force a failover to the backup firewall? Here's some background...

I have two PAs set up with high availability. I have configured e1/1 and e1/2 as aggregate interfaces joined to the aggregate group ae1. The aggregate group's IP address acts as our external IP address to our ISP. I want to set it up so that if either e1/1 or e1/2 fail, it does not force a failover to our second firewall. I just want the internet connection to remain active on firewall one going through the other port. Is this possible? Our HA configuration is active/passive. Please let me know.

Thanks,

Mark

[HULK · Accepted solution]

Hello Mark,

As per your requirement, It is possible to achieve through a monitoring profile on HA configuration. If we set the failover condition to "all" (default is Any) then it will trigger a failover only when both e1/1 and e1/2 will be down. Please find below an example.

1)

2)

3)

4)

Hope this helps.

Thanks