topic Re: FMC HA in different subnets in Network Security

FMC HA in different subnets

DavideRanalli76560 — Mon, 01 Feb 2021 19:57:20 GMT

Hi all, I'll have to deploy two FMCs (on premises) in two DCs geographically separated, the second DC is the DR

My question is, can HA between two FMCs be done using different networks as per schema below?

thanks

Davide

Re: FMC HA in different subnets

Rob Ingram — Mon, 01 Feb 2021 20:09:15 GMT

Hi @DavideRanalli76560

Yes that'll work.

"Note that Firepower Management Centers configured as a high availability pair do not need to be on the same trusted management network, nor do they have to be in the same geographic location."

Reference guide:- https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/firepower_management_center_high_availability.html#ID-2242-000001bc

Re: FMC HA in different subnets

DavideRanalli76560 — Mon, 01 Feb 2021 21:02:40 GMT

HI Rob

thanks, so I can deduce HA between two FMCs is done using the management interface, correct?

Re: FMC HA in different subnets

Rob Ingram — Mon, 01 Feb 2021 21:11:09 GMT

@DavideRanalli76560 Yes, there is no additional interface requirements.

HTH