topic Re: Cluster firepower 2130 license in Network Security

Cluster firepower 2130 license

Flo2 — Mon, 25 Feb 2019 20:05:32 GMT

Hi,

I have 2 firepower 2130.

When I connect to my Smart Account I can see I have 2 standard licenses activated.

My 2 firepower are well registered.

I have a problem when I try to configure the HA (active/standby).

If I connect to the ASDM or when I do a "show version", I see "Cluster is Disabled".

Can you help me ?

Re: Cluster firepower 2130 license

Francesco Molino — Mon, 25 Feb 2019 20:41:27 GMT

Hi

Just to confirm, you want to implement failover right?
If so, in the show version output, you should be able to view Failover license. Cluster is another feature/design for ASA and isn't the same thing as failover.

Re: Cluster firepower 2130 license

Flo2 — Mon, 25 Feb 2019 21:18:39 GMT

Hi Francesco,

Yes sorry I can see "Failover : Active/Active"

So I am able to configure failover in active/standby.

Are there restrictions about interfaces to configure the HA with firepower 2130 ?

I use an etherchannel (port 11 and 12 in an etherchannel) to configure the failover link ?

Regards,

Re: Cluster firepower 2130 license

Francesco Molino — Mon, 25 Feb 2019 21:25:34 GMT

Yes you can configure failover (active/standby).
Yes you can use an etherchannel for failover.

Here a link giving all prerequisites:
https://www.cisco.com/c/en/us/td/docs/security/asa/asa98/configuration/general/asa-98-general-config/ha-failover.pdf