topic HA Firewall Migration: Sync over Dedicated Point-to-Point VLAN in General Topics

HA Firewall Migration: Sync over Dedicated Point-to-Point VLAN

RemoteUser — Sun, 24 Aug 2025 13:33:26 GMT

Hi mates,
our customer will soon need to move a firewall from one datacenter. We currently have an HA cluster (active–standby), and of course the standby unit will be moved to the other datacenter.

I was wondering if it’s possible to have the sync running on a dedicated point-to-point VLAN.
Would that work?

Thanks a lot!

Re: HA Firewall Migration: Sync over Dedicated Point-to-Point VLAN

emmap — Mon, 25 Aug 2025 02:36:29 GMT

What do you mean by 'point-to-point vlan' in this context?

Sync should always be isolated from the rest of the network, either by directly attaching the sync ports between appliances or by ensuring they are connected via a switching layer on an isolated VLAN with no other hosts attached.

Re: HA Firewall Migration: Sync over Dedicated Point-to-Point VLAN

RemoteUser — Mon, 25 Aug 2025 06:47:45 GMT

Yes, that’s what I meant: creating a P2P VLAN on the switch side, since the appliances are physically apart, one in one datacenter and the other in another datacenter.

Thanks!