Networking

High Availability Active-Passive Firewalls

Network Design diagram · made in Skemio

Network diagram showing an Active-Passive firewall pair sharing a virtual IP, linked by heartbeat and state sync links, connected between upstream routers and core switches.
Network diagram showing an Active-Passive firewall pair sharing a virtual IP, linked by heartbeat and state sync links, connected between upstream routers and core switches.

What it shows

  • Dedicated heartbeat link monitors peer health and triggers sub-second failover.
  • State synchronization continuously replicates connection tables to the standby unit.
  • Virtual IP (VIP) migration guarantees clients route traffic seamlessly without re-authenticating.

The takeaway

Stateful synchronization ensures active firewall failovers happen without dropping live user connections.

More network design diagrams