Mechanism of the HA link group on the firewall
1. In hot standby environment, add the upstream and downstream service interfaces to the same link group. When an interface is faulty and becomes down, it triggers the status of all interfaces in the group to be down. This guarantees fast route convergence on the upstream and downstream routers.
2. The link-group function binds the status of several interfaces to form a logical group. If any of the interfaces in the link-group fails, the system changes the status of all other interfaces to Down. After all interfaces in the group recover, the system changes the interfaces to Up. The link-group function guarantees that the upstream and downstream interfaces are in the same status. This prevents inconsistent upstream and downstream link paths after active/standby switchover.
You are advised not to add interfaces on interface cards 18FE+2SFP, 16GE+4SFP, 5FSW, and 8FE+2GE to the link-group. Using them first is recommended.
3. Configure or delete the link group primary
interface or interfaces on other interface cards through the web UI.
a. Choose System > High Availability > Link Group.
b. In Link Group, select the link group to be configured and modify it.
c. Perform as follows to add the interface to or remove it from the link group.
Add the interface to the link group. In the Available group box, select one or multiple interfaces or double-click an interface.
To add all interfaces to the link group, click All.
After the configuration succeeds, added interfaces are displayed in the Selected group box.
Remove the interface from the link group. In the Selected group box, select one or multiple interfaces or double-click an interface.
To remove all interfaces from the link group, click Clear.
After the configuration succeeds, removed interfaces are displayed in the Available group box.
d. Click Apply.
4. CLI configuration method:
Run the system-view command to access the system view.
Run the interface interface-type interface-number command to enter the interface view.
Run the link-group link-group-id command to add the interface to the link group.
Run the undo link-group command to remove the interface from the link group
Hope it Help.
By the way, you can check the price of Cisco Firewalls, Huawei Firewalls, Fortinet Firewalls and Juniper Firewalls.
Learn More:
Differences between Packet Firewall, Stateful Firewall and Application Firewall