topic Re: ION5200 HA in Prisma SD-WAN Discussions

ION5200 HA

ToddSnyderAhead — Thu, 15 Jun 2023 17:29:06 GMT

I'm working with the new ION5200. It doesn't have a controller interface which isn't that big of a deal. I am setting them up as an HA pair for a branch and wanted to see how I should configure HA. Typically you would use the contoller interfaces but since the 5200 doesn't have them, I wasn't certain how HA should be configured. I'm going to have the following interfaces 1 - INET 5 - Private WAN and 9 - LAN. Since this is HA, the secondary ION will have the same IP configuration as the primary. Do I need an HA link between the two IONs to act as a heartbeat?

Re: ION5200 HA

ecraig — Thu, 15 Jun 2023 19:25:07 GMT

For devices without dedicated controller ports, a Switch Virtual Interface (SVI) or sub-interface is used for the HA control interface. SVIs are used for devices with switched ports (1200-S series) and sub-interfaces are used for devices with routed interfaces (non-1200-S devices).

See https://docs.paloaltonetworks.com/prisma/prisma-sd-wan/prisma-sd-wan-admin/prisma-sd-wan-sites-and-devices/prisma-sd-wan-ports-and-interfaces/configure-control-interface-for-management-services-in-ha-setup/configure-svi-as-source-interface

https://docs.paloaltonetworks.com/prisma/prisma-sd-wan/prisma-sd-wan-admin/prisma-sd-wan-sites-and-devices/prisma-sd-wan-ports-and-interfaces/configure-control-interface-for-management-services-in-ha-setup/configure-subinterface-as-source-interface

Re: ION5200 HA

ToddSnyderAhead — Thu, 15 Jun 2023 19:56:31 GMT

Perfect. Wasn't finding those links when searching for a solution. I appreciate it!