FTD HA failover scenario (No data interface monitored)

00u17 — Fri, 03 Dec 2021 06:58:09 GMT

Hello Everyone,

I have a FTD pair in HA with active standby configuration. Both peer are connected to DC switches using VPC.

A direct failover and staelink is connected between both peers. We do not have any data interface monitored or standby ip configured on it. i.e. inside and ouside

1) If failover link and/or statelink disconnects in this case then what would happen?

2) if data interfaces were also being monitored with standby ip and failover link and/or statelink fails then what would happen?

Re: FTD HA failover scenario (No data interface monitored)

balaji.bandi — Fri, 03 Dec 2021 09:29:01 GMT

1) If failover link and/or statelink disconnects in this case then what would happen?

They become the split brain. that means both become active. (then one should manually shut down to restore the services.

2) if data interfaces were also being monitored with standby ip and failover link and/or statelink fails then what would happen?

Good failure scenarios are explained below :

https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/212699-configure-ftd-high-availability-on-firep.html

https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config-guide-v61/firepower_threat_defense_high_availability.html

topic FTD HA failover scenario (No data interface monitored) in Network Security

FTD HA failover scenario (No data interface monitored)

Re: FTD HA failover scenario (No data interface monitored)