ScreenOS Firewalls (NOT SRX)
Highlighted
ScreenOS Firewalls (NOT SRX)

HA Interface IP Addresses?

12.14.09   |  
‎12-14-2009 08:16 AM

Hi there,

I'm configuring a pair of SSG320s in an active/passive cluster.  I've plugged 2 crossover cables into ports in HA zones on each of the firewalls.  Looking at the interface config the HA interfaces are layer 3 and don't have IP addresses on them (this is the default).  Do I need to put IP addresses on them?  Should I make them layer 2?

 

They are plugged directly from 1 firewall to the other so I wouldn't have thought they needed addresses.

 

Thanks,

Pete.

1 REPLY
ScreenOS Firewalls (NOT SRX)

Re: HA Interface IP Addresses?

12.14.09   |  
‎12-14-2009 11:46 PM

Hello Peter



Sure, Since two firewalls are directly connected you wouldn't need IP addresses for HA.