11-24-2018 04:03 PM
In some of our firewalls I note a secondary IP address is assigned to a single HA group ID.
What is the value of having this second IP? The problem it's introducing is that SNMP Traps
are getting gerated once or twice a day noting that the secondary IP address couldn't be
reached. But there is never a problem with HA failing over - the primary is always reachable.
So what is the value of this secondary IP address (to me it just seems like noise potential.)
Anyone run into this situation?
Enable HA
x
Group ID
1
Description
Mode
active-passive
Enable Config Sync
Peer HA1 IP Address
172.19.6.1
Backup Peer HA1 IP Address
172.19.7.1
11-25-2018 12:11 AM
If for some reason HA1 link goes down and firewalls can't see each other over it any more then they both come active assumihg that peer is dead. Really bad situation.
For that reason HA1 bacup is used.
Usually it is best practice to use management interface as HA1 backup.
11-25-2018 12:11 AM
If for some reason HA1 link goes down and firewalls can't see each other over it any more then they both come active assumihg that peer is dead. Really bad situation.
For that reason HA1 bacup is used.
Usually it is best practice to use management interface as HA1 backup.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
