topic FTDv HA switch active peer between units fail in Network Security

FTDv HA switch active peer between units fail

Amiraf — Tue, 16 May 2023 08:40:08 GMT

Hi . i have deploy two FTDv on Vcenter and they are HA as Active /standby units. when i run switch active peer as soon as it completed , i lose my outside interface ping .
i checked both FTDv config from CLI and interfaces IPs from previous unit assigned to new active unit.

How can i solve the problem?
thanks

Re: FTDv HA switch active peer between units fail

MHM Cisco World — Tue, 16 May 2023 09:15:06 GMT

check the mac address, try assign MAC address for both active and standby

Re: FTDv HA switch active peer between units fail

Amiraf — Tue, 16 May 2023 09:37:38 GMT

i Have Done before . when i run " Switch Active peer " New Active unit take active mac address but my ping gone.

FMC HA config image :

Re: FTDv HA switch active peer between units fail

MHM Cisco World — Thu, 18 May 2023 23:50:23 GMT

the mac address is move from active to standby (new active)
the issue is SW, check the SW see if the MAC address point to correct active FW

Re: FTDv HA switch active peer between units fail

Sheraz.Salim — Fri, 19 May 2023 08:43:15 GMT

this seem like either you FTDv presentation (for example vmware nick are not confiured properly) or you most probably having issue with switch. for example could be switch interface vlan is miss-configured.

as the behavior you suggest that as soon as you do a switch active you lost access to outside interface.