Whenever I setup HA, I get an IP address conflict that lists the LAN IP address of the gateway as well as my static NAT devices. The HA still works, but the log says I get an IP address conflict on all these devices on the MAC address of the backup firewall. Shouldn't my NAT devices and the LAN have the same IP on both firewalls? The documentation says to make sure the code is the same and the rules are the same which I did. I also copied all of these NAT devices into the Network Objects area. I only have HA for the internal network. I only have one ISP, so I'm not load balancing or using HA for the Internet connection out. Also, not to state the obvious, but I do have different IP addresses for each firewall with the same virtual IP. HA works, just this errors keep showing up in the log.
This message has been edited. Last edited by: ToneWalker,
This happens all the time. I see the errors in the log of the primary gateway, when I fail-over to the passive gateway and then after several minutes return control back to the primary gateway, the errors continue in the log. They errors may have been logged on the passive gateway (once active) but I don't recall viewing to see. I will test again when I get some downtime. It's hard to test this on production firewalls. :)
