Panorama Ethernet interfaces IP settings greyed out

psycoma1984 — Fri, 04 Feb 2022 10:57:15 GMT

Hello All,

We have 2xM600 appliances in HA pair. We want to separate SSH/HTTPS management and device management/loggin collector communication on different interfaces, e.g.:

1. SSH/HTTPS access to Panorama will still be on Management interface as well as Log Collector communication;

2. Device management will move to Ethernet 1/1.

I was able to configure new address/mask/gateway for Ethernet1/1 on Panorama Primary. When I am trying to do so on Secondary, every option there is greyed out except Public IP address.

Is it at all possible to be configured on 2 different IP addresses within HA pair on Ethernet1/1 interface? It looks like it doesn't synchronize these settings between nodes.

Appreciate your response.

Re: Panorama Ethernet interfaces IP settings greyed out

kiwi — Mon, 07 Feb 2022 13:27:46 GMT

Hi @psycoma1984 ,

Eth1/1 should be synchronized.

The settings that are not synchronized are those that are unique to each peer, such as the following:

Panorama HA configuration—Priority setting, peer IP address, path monitoring groups and IP addresses
Panorama configuration—Management interface IP address, FQDN settings, login banner, NTP server, time zone, geographic location, DNS server, permitted IP addresses for accessing Panorama, SNMP system settings, and dynamic content update schedules
Scheduled configuration exports
NFS partition configuration and all disk quota allocation for logging. This applies only to a Panorama virtual appliance in Legacy mode that runs on a VMware ESXi server
Disk quota allocation for the different types of logs and databases on the Panorama local storage (SSD)

Password for the Panorama admin administrator

Source: Synchronization Between Panorama HA Peers

Cheers,

-Kiwi

topic Re: Panorama Ethernet interfaces IP settings greyed out in General Topics

Panorama Ethernet interfaces IP settings greyed out

Re: Panorama Ethernet interfaces IP settings greyed out