https://live.paloaltonetworks.com/t5/next-generation-firewall/virtual-address-active-active/m-p/538767#M1139 <P>is virtual address mandatory for active-active HA configurations. I do not wish to use virtual address for A-A HA. My ISP does not give enough IPs</P> Fri, 14 Apr 2023 11:38:26 GMT ceapen01 2023-04-14T11:38:26Z https://live.paloaltonetworks.com/t5/next-generation-firewall/virtual-address-active-active/m-p/538767#M1139 <P>is virtual address mandatory for active-active HA configurations. I do not wish to use virtual address for A-A HA. My ISP does not give enough IPs</P> Fri, 14 Apr 2023 11:38:26 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/virtual-address-active-active/m-p/538767#M1139 ceapen01 2023-04-14T11:38:26Z https://live.paloaltonetworks.com/t5/next-generation-firewall/virtual-address-active-active/m-p/538906#M1143 <P>Hi <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/177752">@ceapen01</a> ,</P> <P>&nbsp;</P> <P>A virtual or floating IP address is not required for route-based redundancy.&nbsp; See the 3 use cases here -&gt; <A href="https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/high-availability/set-up-activeactive-ha/determine-your-activeactive-use-case" target="_blank">https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/high-availability/set-up-activeactive-ha/determine-your-activeactive-use-case</A>.</P> <P>&nbsp;</P> <P>Note step 16 in this doc -&gt; <A href="https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/high-availability/set-up-activeactive-ha/configure-activeactive-ha" target="_blank">https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/high-availability/set-up-activeactive-ha/configure-activeactive-ha</A>.&nbsp; Two of the use cases require a floating VIP.</P> <P>&nbsp;</P> <P>Thanks,</P> <P>&nbsp;</P> <P>Tom</P> Sun, 16 Apr 2023 11:39:08 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/virtual-address-active-active/m-p/538906#M1143 TomYoung 2023-04-16T11:39:08Z