Active - Passive Site

Question

Hello, 
 
 I need help with configure StandBy site. 
 
 Site A 
 XGS2100 with HA 
 Aruba 6200F Stack SW 
 Servers 
 
 Site B (SdantBy) 
 XGS2100 
 Aruba 6200F Standalone 
 Servers

The FW configuration of FW01 and FW02 is identical. My ISP transfers the external IP address from Site A to Site B automatically when its equipment fails. How can I automate the activation of FW02 when ISP fails on Site A so that there is no Split Brain? At this point I need to manually activate the LAN ports on Site B FW02 
 One option I had was to configure VRRP on Sophos FW, but Sophos does not support this protocol. How else can the configuration be automated?

Abdelhamed Kasem · Answer

Hi Aleksej, 
 If I understand correctly, in this scenario, the WAN interface will be down on FW01 if it's transferred to FW02. 
 To address this, you can add the WAN port to the monitoring ports. If it goes down, the standby firewall (FW02) will become active. 
 or you can give the internet to the firewalls through a switch, Add the switch between the router and the firewalls.

Active - Passive Site

Top Replies