Different Route Path Active-Passive Setup

Question

Hi!

I tried to do an A-P 100F HA Setup where I have assigned the IP to ha1 interface. But there is no switch in between yet. Direct connection only.

Everything is the same in Active and Standby firewall. But when I try to check the routing entry for the ha1 ip address, they aren’t the same. The output should show “via LAG1.16”

You may refer to the images attached.

The secondary firewall outputs the expected route. But on the primary, it says directly connected. It’s actually correct because I configured ha1 in primary and it just cascaded the config to secondary.

One thing that confuses me is that , why different routes when they are just configured the same routing entries?

msanjaypadma · Answer

Hi ​@renzanjopcaparas,Let's continue the discussion within the existing thread to ensure consistency and clarity?Based on your interface configuration and routing information, there appears to be some confusion.Typically, routing details should not be visible expect kernel routes on the secondary(slave) firewall unless thereisa split-brain scenario or configured for VDOM-based HA setup. Additionally, it is unclear why an IP address has been assigned to the secondary device.Could you please verify the HA status on both firewalls? Hope you are using this HA1 and HA2 as HA heartbeat ports !#get sys status#get sys ha statusIs that possible you to shareHA configuration :#show sys haIf you have found a solution, please like and mark it as solved to make it easily accessible for everyone.Thanks,Mayur Padma

Sign up

Login with SSO

Login to the community

Login with SSO