topic Re: How to disable config sync in a HA pair? in General Topics

How to disable config sync in a HA pair?

asia — Fri, 07 May 2010 12:51:36 GMT

Hello,

I'am using to PAN devices in a HA pair, and i want to make some changes on one and not on the other before doing a switchover. Can i disable only config synchronisation and let all the other HA functionality up?

Regrds.

Re: How to disable config sync in a HA pair?

nrice — Sat, 08 May 2010 00:20:37 GMT

You can suspend the passive device and make your changes. The configs will synch once you make suspended device functional again. >request high-availability state suspend > request high-availability state functional. You can also disable HA by unchecking "Enable HA" on the Device tab >High Availability.

Re: How to disable config sync in a HA pair?

asia — Mon, 10 May 2010 08:02:26 GMT

Thank you Rice,

But my need, is to maintain the HA pair functional (the heart beat), and to disable only the config synchronisation, is it possible?

Regards.

Re: How to disable config sync in a HA pair?

nrice — Mon, 10 May 2010 19:51:39 GMT

There isn't a command to disable synchronization of the configs as that would defeat the purpose of the HA pair.

Re: How to disable config sync in a HA pair?

mb_equate — Thu, 15 Oct 2020 06:33:53 GMT

Of course you can disable synchronisation of the configs in an HA pair, in fact it's required to migrate one to Panorama: https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/manage-firewalls/transition-a-firewall-to-panorama-management/migrate-a-firewall-ha-pair-to-panorama-management.html

From the CLI:

user@device(active)# set deviceconfig high-availability group configuration-synchronization enabled no

🙂

Re: How to disable config sync in a HA pair?

reaper — Thu, 15 Oct 2020 07:29:33 GMT

@mb_equatethis post was started in 2010, back then Acitve-Active didn't even exist yet. In the meanwhile , as you pointed out correctly, this option was added in the HA settings

Re: How to disable config sync in a HA pair?

mb_equate — Mon, 19 Oct 2020 01:03:02 GMT

I just realised that, d'oh!

This thread is archived

New comments cannot be posted and votes cannot be cast