FMC HA in different subnets

[DavideRanalli76560]

Hi all, I'll have to deploy two FMCs (on premises) in two DCs geographically separated, the second DC is the DR 

My question is, can HA between two FMCs be done using different networks as per schema below?

thanks

Davide

 

[Rob Ingram]

Hi @DavideRanalli76560 

Yes that'll work.

"Note that Firepower Management Centers configured as a high availability pair do not need to be on the same trusted management network, nor do they have to be in the same geographic location."

Reference guide:- https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/firepower_management_center_high_availability.html#ID-2242-000001bc

[DavideRanalli76560]

HI Rob

thanks, so I can deduce HA between two FMCs is done using the management interface, correct?

[Rob Ingram · Accepted solution]

@DavideRanalli76560 Yes, there is no additional interface requirements.

HTH