You are here
SEC0249 - FTD 6.1 High Availability (HA) (Part 1)
Difficulty Level:
Lab Document:
<Please login to see the content>
Category:
Security
The video shows you how to configure High Availability on Cisco FTD 6.1. We will setup a pair of FTD device to create a HA pair. We will configure failover links and virtual MAC address. Failover test will be performed at the end using various failure scenarios.
Part 1 of this video covers HA Configuration
Topic:
-
High Availability (HA)
- HA Failover Link
- Stateful Link
- Interfaces Monitoring
- Virtual MAC Address
- Failover Tests
About Author
Metha Chiewanichakorn, CCIE#23585 (Ent. Infra, Sec, SP), is a Cisco networking enthusiast with years of experience in the industry. He is currently working as a consulting engineer for a Cisco partner. As a founder of and an instructor at labminutes.com, Metha enjoys learning and challenges himself with new technologies.
9 comments
HA Differences
Good morning
I have two Firepower 2140 arriving soon and I have been searching about the differences between the Active/Active and Active/Passive Failover schemes and I haven't found anything yet
I would like to know what are the operational differences of those schemes, like if there are some services available in a certain scheme that won't work in the other.
Stay pending for your answer, thanks a lot.
HA Differences
Unfortunately, FTD2100 today can only do Active/Standby meaning one FTD will be passing traffic at a time while the other wait for failover which is similar to ASA. Only FTD 4100 and 9300 are capable to Active/Active in a form of clustering.
Licence
Cisco now has an HA bundle SKU which gives you a discount on the second license.
FPR2110-FTD-HABUN
Licence
Great info. Thank you for sharing.
FTD HA on EVE-NG
Hello,
I'm just trying to configure FTD HA Active/Standby on EVE-NG using FTD6.6, when I reach the part of selecting the failover interface, there is no interface to select, what could be the problem?
FTD HA Failover & State Link
Hi Metha, I have configured a FTD HA using FMC, everything is working. However now i would like to change the Failover and State Links, please let me know the steps
Regards
Prasad
FTD HA Failover & State Link
Not sure what you meant by changing Failover/State link but generally you will need to break HA, update what you need and put it back to HA.
Hi Metha, Thanks for the
Hi Metha, Thanks for the reply
Basically, wanted to delete the interfaces and reassign new interfaces for Both Failover and State Link.
Regards
Prasad
FTD HA Failover & State Link
Then you definitely need to break HA, fix the interfaces and IP and rebuild HA.