Can a A/A Floating IP be set to the interface IP ?

[dbrenipc]

Hello - In the VRRP world, I can have 2 devices active with a single IP (VRRP IP address ) active only on 1.

I have a situation where I need to vsys a box (L3 & Vwire)    The vwires are replacing Tipping point IDP's , with active traffic, so I need Active Active- fine..

the FW vsys only needs a single address active in one interface network at any time.  So I really DO NOT need the active active, but have to because it is system wide.

Question...

Can I set Virtual Addresses on the DeviceID 0 , to be the same as the interfaces, and then set Dev0 prio=0 and dev 1 prio=255.

I believe the result will be only a single ip active on dev id 0, unless link fails, etc.

Thank you in advance, I have it configured, but cannot test.  Just curious if anyone has done it.

regards,

Don

[UhMayYeah]

I was able to get this working using the interface address:

admin@50-PA-5020(active-primary)> show interface logical | match 192.168

ethernet1/4         19    1    trust-L3         vr:default               0      192.168.50.1/23

admin@50-PA-5020(active-primary)> show high-availability virtual-address | match 192.168

  192.168.50.1                            Active:yes    Type:floating

admin@51-PA-5020(active-secondary)> show high-availability virtual-address | match 192.168

  192.168.50.1                            Active:no     Type:floating

IP-CONFIG

Connection-specific DNS Suffix  . :

IP Address. . . . . . . . . . . . : 192.168.50.206

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.50.1

Results:

Reply from 192.168.50.1: bytes=32 time<1ms TTL=64

Reply from 192.168.50.1: bytes=32 time<1ms TTL=64

Pinging 4.2.2.2 with 32 bytes of data:

Reply from 4.2.2.2: bytes=32 time=25ms TTL=57

[dbrenipc]

Thank you very much.  I actually was able to get the required addresses from the customer so I didn't have to use the same address..  But this is good to know.

thank you,

Don