topic FTD High Availability Failover using EtherChannel in Network Security

FTD High Availability Failover using EtherChannel

noisey_uk — Fri, 21 Feb 2020 14:45:19 GMT

I have 2 x FTD2110 managed by an FMCv, all v6.2.2. I'm trying to create an HA pair using an EtherChannel rather than a single physical link. However, only the physical interfaces are appearing in the dialog box to create the HA pair. The documentation states that "You can use any unused data interface (physical, redundant, or EtherChannel) as the failover link"though. This is really simple to do with ASAs... what am I missing when it comes to FTDs? Thanks!

Re: FTD High Availability Failover using EtherChannel

Marvin Rhoads — Wed, 15 Nov 2017 11:43:34 GMT

Have you assigned an IP address to the Etherchannel first?

I don't have one to check but I believe some other posters reported success after having done that.

Re: FTD High Availability Failover using EtherChannel

noisey_uk — Wed, 15 Nov 2017 12:16:24 GMT

Just tried it - no difference. Thanks for the suggestion though.

Re: FTD High Availability Failover using EtherChannel

noisey_uk — Thu, 16 Nov 2017 13:50:15 GMT

Just in case anyone else comes across this problem - ensure that you haven't named your Portchannel interface prior to creating the HA pair. If you have named your Portchannel, FMC thinks that it's unavailable for use as the HA link.

Re: FTD High Availability Failover using EtherChannel

dinos1979 — Fri, 22 Mar 2024 07:19:13 GMT

Thank you noisey_uk. Works for me.

Re: FTD High Availability Failover using EtherChannel

sinade101 — Thu, 22 Jan 2026 08:39:49 GMT

Don't give a logical name to the port-channel, and don't assign an IP address. Otherwise, FMC will see it as a used interface.