cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
196
Views
15
Helpful
5
Replies
Beginner

Link aggregation or virtual IP

Dear all ,

I would like to know stupid question.I have the problem to integrate existing network and HA firewall.

please see below diagram and let me know can i conbine two routed interfac to one virtual IP ? it is not mean vrrp. i mean i want to run ether-channel or trunk or link aggregation to see single redundancy link.

Can i solve by using lacp ?

 

Everyone's tags (1)
5 REPLIES 5
Enthusiast

Re: Link aggregation or virtual IP

Need more information about the switches connecting firewall. For eg : If you are planning to connect a pair of Nexus you can use vPC to the firewall or if you have catalyst you can use VSS or stackwise virtual
Beginner

Re: Link aggregation or virtual IP

Thank for help .I would like to know can i solve without using switches?.
May I know can I configure two router ports as a single virtual port.Eg L3
ether channel or route aggregation?
VIP Advisor

Re: Link aggregation or virtual IP

Hello

What kind of fw HA pair are you wanting to use Make/Model?  - When a FW HA is created (say on a cisco ASA in a active/standby mode) the primary and secondary addressing is created on the one fw along with the specified LAN/Stateful failover links usually on the soon to be designated primary fw then when the physical connections are made the standby fw  will synchronize with he primary and a the HA is created, thus the same primary inside/outside address will be available on either physical fw so you really wouldn't need hrsp.

 

 

 

 



kind regards
Paul

Please rate and mark posts accordingly if you have found any of the information provided useful.
It will hopefully assist others with similar issues in the future
Highlighted
Beginner

Re: Link aggregation or virtual IP

Hi,
I have confuse in desing.If WAN link of R1 is down,branches can detect wan is down and so they swing their traffic to R2.But our VRRP didn't know R1 WAN is down or not.So R1 is still primary and return traffic is fail,correct ? And our FW cannot detect the WAN and FW still forward the all traffice to R1 and traffice is fail,correct ? how to solve this issue ?
VIP Advocate

Re: Link aggregation or virtual IP

Hi,

I think this is a duplicate question. I just replied to your post with a suggestion as VRRP with IP SLA. 

 

Regards,

Deepak Kumar

Regards,
Deepak Kumar,
Don't forget to vote and accept the solution If this comment will make help you!
CreatePlease to create content
Content for Community-Ad
July's Community Spotlight Awards