View Cart
0 Items | Total: US$0.00
Welcome,      Register

You are here

SEC0249 - FTD 6.1 High Availability (HA) (Part 1)

Average: 5 (1 vote)
Difficulty Level: 
Lab Document: 
<Please login to see the content>
The video shows you how to configure High Availability on Cisco FTD 6.1. We will setup a pair of FTD device to create a HA pair. We will configure failover links and virtual MAC address. Failover test will be performed at the end using various failure scenarios. 
Part 1 of this video covers HA Configuration
  • High Availability (HA)
    • HA Failover Link
    • Stateful Link
  • Interfaces Monitoring
  • Virtual MAC Address
  • Failover Tests

About Author

Metha Cheiwanichakorn, CCIE#23585 (RS, Sec, SP), is a Cisco networking enthusiast with years of experience in the industry. He is currently working as a consulting engineer for a Cisco partner. As a founder of and an instructor at, Metha enjoys learning and challenges himself with new Cisco technologies.


Good morning

I have two Firepower 2140 arriving soon and I have been searching about the differences between the Active/Active and Active/Passive Failover schemes and I haven't found anything yet

I would like to know what are the operational differences of those schemes, like if there are some services available in a certain scheme that won't work in the other.

Stay pending for your answer, thanks a lot.

Unfortunately, FTD2100 today can only do Active/Standby meaning one FTD will be passing traffic at a time while the other wait for failover which is similar to ASA. Only FTD 4100 and 9300 are capable to Active/Active in a form of clustering. 

Cisco now has an HA bundle SKU which gives you a discount on the second license.


Great info. Thank you for sharing.


I'm just trying to configure FTD HA Active/Standby on EVE-NG using FTD6.6, when I reach the part of selecting the failover interface, there is no interface to select, what could be the problem?

Hi Metha, I have configured a FTD HA using FMC, everything is working. However now i would like to change the Failover and State Links, please let me know the steps


Not sure what you meant by changing Failover/State link but generally you will need to break HA, update what you need and put it back to HA.

Hi Metha, Thanks for the reply
Basically, wanted to delete the interfaces and reassign new interfaces for Both Failover and State Link.


Then you definitely need to break HA, fix the interfaces and IP and rebuild HA.