12-20-2017 08:54 AM - edited 02-21-2020 06:59 AM
I'm about to implement two Firepower 2100 on my company. I would like to know about the differences about HA Schemes, Is there any services that can work differently on each scheme? which one is the most recommended and why?
12-21-2017 10:33 AM
Hi jfigueroa8,
In general I don't see necessity to use Active/Active.
Active/Standby works pretty well, and it is simpler to implement/operate.
02-07-2019 06:01 AM
Hey ¿whats about the IPS licences? ¿We need to buy two licences (one for each 2100) or only one for the active device?
Thanks a lot
02-07-2019 06:19 AM
From IPS point of view both are active (ready to forward traffic), so you will need two licenses independently of your deploy (active/active, active/standby).
I hope Cisco change it soon... but for now you need two licenses.
04-03-2020 06:31 AM
No solution till now. So in Active/Standy on FPR2120 and I have to buy 2 TAMC licences.
I am sorry, for that purpose there is a demand to have active/active or to by second HA lic. for nothing.
That is a solution.
02-07-2019 07:06 PM
The Firepower appliances running FTD there is no Active/Active HA per se since that was a construct from ASA software that relied on multiple contexts. Straight HA on FTD uses an Active/Standby scheme.
You can run a 2-unit cluster which is sort of like Active-Active but very few customers bother to do that.
In any case, separate licenses (IPS subscription, URL Filtering and or Malware (AMP)) are required for each physical appliance.
05-30-2019 12:06 PM
Hi Marvin,
How can you configure this?
'You can run a 2-unit cluster which is sort of like Active-Active but very few customers bother to do that.' Is this supported on the 2100?
Thanks
Osman
05-30-2019 06:16 PM
Clustering for FTD is currently (as of release 6.4) only supported on the 4100 and 9300 series appliances.
Reference:
05-31-2019 01:03 AM
05-31-2019 05:09 AM
This is not currently possible if you have 2100 series appliances.
06-26-2020 02:04 AM
Hi, is it still the case that 2130 FTD does not support active/active scenario?
06-26-2020 03:39 AM
It does not. (And there are no near term plans to change that.)
06-26-2020 11:25 PM
Thanks for your help Marvin
08-21-2022 10:22 PM
Pleease what does 2-unit cluster means? how to achieving 2-unit clustering? Please any link may refer to 2-unit clustering.
Thank you for your advise.
08-22-2022 01:10 AM
@jiami A link was already provided earlier in this thread.
Version 7.2 has added clustering for the new 3100 series but is otherwise very similar to what was described for 6.4. Reference:
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide