PCNSE · Question #650
An administrator has two pairs of firewalls within the same subnet. Both pairs of firewalls have been configured to use High Availability mode with Active/Passive. The ARP tables for upstream routes…
The correct answer is C. Change the Group IDs in the High Availability settings to be different from the other firewall pair. The Group ID is part of the MAC address in a HA pair. Each pair of devices in a multi-cluster environment must have a unique Group ID in order to prevent duplicate MAC entries in upstream ARP tables. Changing the Group ID in one of these clusters should resolve the problem.
Question
An administrator has two pairs of firewalls within the same subnet. Both pairs of firewalls have been configured to use High Availability mode with Active/Passive. The ARP tables for upstream routes display the same MAC address being shared for some of these firewalls. What can be configured on one pair of firewalls to modify the MAC addresses so they are no longer in conflict?
Options
- AChange the interface type on the interfaces that have conflicting MAC addresses from L3 to
- BOn one pair of firewalls, run the CLI command: set network interface vlan arp.
- CChange the Group IDs in the High Availability settings to be different from the other firewall pair
- DConfigure a floating IP between the firewall pairs.
How the community answered
(47 responses)- A4% (2)
- B6% (3)
- C72% (34)
- D17% (8)
Explanation
The Group ID is part of the MAC address in a HA pair. Each pair of devices in a multi-cluster environment must have a unique Group ID in order to prevent duplicate MAC entries in upstream ARP tables. Changing the Group ID in one of these clusters should resolve the problem.
Topics
Community Discussion
No community discussion yet for this question.