Active/Active firewall

mikedelafield — Mon, 11 Mar 2019 12:30:45 GMT

On an Active/Active firewall configuration with Standby addresses configured what will happen if the Active interface goes down?

In our setup the firewall did not fail over. But it did fail over for the interfaces which did not have an IP address configured.

Thanks

Re: Active/Active firewall

mvandorp — Tue, 15 Apr 2008 08:57:32 GMT

ASA, FWSM? Routed, Transparent?

On FWSM, we use Active-Active in both routed and transparent. We use link-monitoring to determine which interfaces initiate a failover.

It will not work with 2 FWSMs in the same chassis, because the VLAN-interface only goes down when there are no other active ports. With 2 FWSMs in that VLAN, the interface does not go down.

When in different chassis, make sure only one port on the switch is in that VLAN (only int vlan x *OR* switchport access VLAN x, but not both), otherwise the link will not fail on the FWSM.

Hope this helps,

Marcel

topic Active/Active firewall in Network Security

Active/Active firewall

Re: Active/Active firewall