300-710 · Question #200
A network administrator is implementing an active/passive high availability Cisco FTD pair. When adding the high availability pair, the administrator cannot select the secondary peer. What is the…
The correct answer is A. The second Cisco FTD is not the same model as the primary Cisco FTD. The primary reason the secondary FTD peer cannot be selected for an active/passive HA pair is that it is not the same hardware model as the primary Cisco FTD.
Question
A network administrator is implementing an active/passive high availability Cisco FTD pair. When adding the high availability pair, the administrator cannot select the secondary peer. What is the cause?
Options
- AThe second Cisco FTD is not the same model as the primary Cisco FTD.
- BAn high availability license must be added to the Cisco FMC before adding the high availability
- CThe failover link must be defined on each Cisco FTD before adding the high availability pair.
- DBoth Cisco FTD devices are not at the same software version.
How the community answered
(27 responses)- A89% (24)
- C4% (1)
- D7% (2)
Why each option
The primary reason the secondary FTD peer cannot be selected for an active/passive HA pair is that it is not the same hardware model as the primary Cisco FTD.
For Cisco Firepower Threat Defense (FTD) high availability, both the primary and secondary devices in the HA pair must be the exact same hardware model. This requirement ensures hardware compatibility, identical interface configurations, and consistent performance across both devices for seamless failover operation.
High availability functionality for FTD typically does not require a separate HA-specific license on the FMC; licensing is generally per FTD device.
The failover link is defined as part of the HA configuration process within the FMC, not a pre-configuration step on each FTD device before initiating the HA setup.
While both FTD devices must be at the same software version for HA to function, a model mismatch is a more fundamental prerequisite that would prevent initial selection of the secondary peer in the FMC wizard.
Concept tested: Cisco FTD High Availability prerequisites
Source: https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/device_high_availability.html
Topics
Community Discussion
No community discussion yet for this question.