Link aggregation or virtual IP

[UCrypto]

Dear all ,

I would like to know stupid question.I have the problem to integrate existing network and HA firewall.

please see below diagram and let me know can i conbine two routed interfac to one virtual IP ? it is not mean vrrp. i mean i want to run ether-channel or trunk or link aggregation to see single redundancy link.

Can i solve by using lacp ?

[nazimkha]

Need more information about the switches connecting firewall. For eg : If you are planning to connect a pair of Nexus you can use vPC to the firewall or if you have catalyst you can use VSS or stackwise virtual

[UCrypto]

Thank for help .I would like to know can i solve without using switches?.
May I know can I configure two router ports as a single virtual port.Eg L3
ether channel or route aggregation?

[paul driver]

Hello

What kind of fw HA pair are you wanting to use Make/Model?  - When a FW HA is created (say on a cisco ASA in a active/standby mode) the primary and secondary addressing is created on the one fw along with the specified LAN/Stateful failover links usually on the soon to be designated primary fw then when the physical connections are made the standby fw  will synchronize with he primary and a the HA is created, thus the same primary inside/outside address will be available on either physical fw so you really wouldn't need hrsp.

[UCrypto]

Hi,
I have confuse in desing.If WAN link of R1 is down,branches can detect wan is down and so they swing their traffic to R2.But our VRRP didn't know R1 WAN is down or not.So R1 is still primary and return traffic is fail,correct ? And our FW cannot detect the WAN and FW still forward the all traffice to R1 and traffice is fail,correct ? how to solve this issue ?

[Deepak Kumar]

Hi,

I think this is a duplicate question. I just replied to your post with a suggestion as VRRP with IP SLA. 

Regards,

Deepak Kumar