Monitoring Cisco Firepower 2110 in HA

[magnusthor]

Hi

I have 2 Cisco Firepower 2110 Threat Defense v6.6.1

In HA mode

I'v searched a lot but haven't found clear answer.

Question is:

What interface does not change ip address when failover occur ?

That is:

primary active / secondary standby

primary standby / secondary active

Need to retain same ip address on each physical unit whatever the state is an allow snmp query.

Reason:

Need to monitor both units and not have changed serial and ssh keys changed if failover occur.

Best regards

Magnús

[Marvin Rhoads · Accepted solution]

Only the management/diagnostic interface does not change during failover. All the dataplane interfaces will change to follow the device currently in Active role.