https://community.cisco.com/t5/network-security/high-availability-for-fmc/m-p/5555816#M1125249 <P>Today, I'm working on the High Availability of Firepower Management Center in eve-ng. I've already done FTD HA which was quite easy to configure and verify, but HA for FMC is tough to get. I followed cisco's official documentation. The issue I found out with this is if my primary fmc fails then the secondary doesn't take over the role of primary. The secondary just shows that the acive management cener is failed but there is no switchover. It also makes a bit of sense since there is no dedicated failover link so if I connected two fmc's with a switch and then I turned off the interface of switch towards the primary fmc then how does the fmc2 gonna know what happened to the primary fmc. I'm not sure how things work here with FMC's HA and also that the switchover didn't happen till I checked maybe it takes more time which also makes very less sense. What am I missing here??</P> Sat, 30 May 2026 07:36:23 GMT parthrawat979 2026-05-30T07:36:23Z https://community.cisco.com/t5/network-security/high-availability-for-fmc/m-p/5555816#M1125249 <P>Today, I'm working on the High Availability of Firepower Management Center in eve-ng. I've already done FTD HA which was quite easy to configure and verify, but HA for FMC is tough to get. I followed cisco's official documentation. The issue I found out with this is if my primary fmc fails then the secondary doesn't take over the role of primary. The secondary just shows that the acive management cener is failed but there is no switchover. It also makes a bit of sense since there is no dedicated failover link so if I connected two fmc's with a switch and then I turned off the interface of switch towards the primary fmc then how does the fmc2 gonna know what happened to the primary fmc. I'm not sure how things work here with FMC's HA and also that the switchover didn't happen till I checked maybe it takes more time which also makes very less sense. What am I missing here??</P> Sat, 30 May 2026 07:36:23 GMT https://community.cisco.com/t5/network-security/high-availability-for-fmc/m-p/5555816#M1125249 parthrawat979 2026-05-30T07:36:23Z https://community.cisco.com/t5/network-security/high-availability-for-fmc/m-p/5555871#M1125251 <P>Hello&nbsp;<a href="https://community.cisco.com/t5/user/viewprofilepage/user-id/1928717">@parthrawat979</a>&nbsp;<BR /><BR />Don't take the high availability concept of firewalls management as the firewalls, most of the firewalls managements i did work with in other vendors their switchover is manual in case one went down.<BR /><BR />One of the causes is if you have FW management in DC1 and secondary in DC2 and there's an interruption between these 2 segments or the stretched layer 2 vlan, then both managements will become active.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="AmineZAKARIA_0-1780146955458.png" style="width: 999px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/282804i74BA8F80C337185C/image-size/large?v=v2&amp;px=999" role="button" title="AmineZAKARIA_0-1780146955458.png" alt="AmineZAKARIA_0-1780146955458.png" /></span></P><P>&nbsp;</P><P>Link : <FONT color="#000080"><A href="https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/admin/710/management-center-admin-71/system-ha.html#ID-2242-0000044e" target="_blank">https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/admin/710/management-center-admin-71/system-ha.html#ID-2242-0000044e</A></FONT><BR /><BR /><FONT size="4" color="#000000"><SPAN>If this resolved your issue, please mark it as "Accepted as a solution"!</SPAN></FONT><BR /><FONT size="4" color="#000000">Regards!</FONT><BR /><BR /></P> Sat, 30 May 2026 13:25:43 GMT https://community.cisco.com/t5/network-security/high-availability-for-fmc/m-p/5555871#M1125251 Amine ZAKARIA 2026-05-30T13:25:43Z