HA without setting all interfaces with static IP addresses?

[jjevans1]

Hello All,

Would like to know if there is a way to configure HA between 2 Cisco 1010 FTD using Device Manager? I was trying but the HA Configure button is greyed out due to error stating I need all interfaces to have a static IP address. I am looking for a work around because I use 1 interface as DHCP for a valid reason. I would just like to dedicate one port each to HA with static IP addresses. Is that possible?

Thank you for your insight,

J

[balaji.bandi]

I do not think that work, as a HA we need to have IP address configured, not from DHCP.

https://www.cisco.com/c/en/us/support/docs/security/secure-firewall-threat-defense/221012-configure-ftd-high-availability-using-fd.html

• Does not have DHCP/Point-to-Point Protocol over Ethernet (PPPoE) configured in any of the interfaces.

https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/212699-configure-ftd-high-availability-on-firep.html

[jjevans1]

Thank you that is helpful. My question then is why do all 8 interfaces need a static IP address? I just want to use one port from each firewall to dedicate to HA. I need port 1 to remain DHCP. 

[balaji.bandi]

For HA you need 2 static IP address, not sure DHCP you were mentioned here. (is this DHCP on outside interface ?)

[jjevans1]

Yes correct I need two static IP addresses for HA. But the error message and the HA button in Device Manager is greyed out saying I need all 8 interfaces to be static IP addresses. That is what I do not understand. And Yes port 1 is outside interface. 

[balaji.bandi]

not sure the reason you need DHCP on interface ?

when you creating HA you need to follow the guidelines.

[jjevans1]

Because its a cable modem on that port that requires DHCP. Both guidelines do not state all interfaces require static IP. Just the HA ports. So is there a way to setup HA just on one port each? Maybe via CLI?