Active/Standby interface configuration

[Jerome C.]

Hello

I have currently a 2901 router on my remote site. On this site, I will deploy a cluster of 2 Palo Alto (active/passive mode). 

If I add an extension card to have another LAN interface, how I can configure my 2901 to have Ge0/1 as active link connected physically on the active firewall and Ge0/2 connected phisycally on the passive firewall and when I change passive firwall to actve, to keep the communication ?

Regards

[Seb Rupik]

Hi there,

Create a BVI interface and then configure G0/1 and G0/2 to be in the same bridge-group. This will ensure Layer3 reachability to the PAN firewalls during a failover event.

https://www.cisco.com/c/en/us/support/docs/lan-switching/integrated-routing-bridging-irb/200650-Understanding-Bridge-Virtual-Interface.html

cheers,

Seb.