Does HA2 link failure trigger failover

aijazkhan06 — Sat, 07 May 2022 12:24:00 GMT

Hi,

I've got firewalls in active/standby mode and preemptive is not enabled. HA2 link flapped for around 12:47 PM GMT and link was up at 12:52 PM GMT

Model : 5060

Re: Does HA2 link failure trigger failover

PavelK — Sat, 07 May 2022 21:52:48 GMT

Thank you for the post @aijazkhan06

the HA2 link failure does not trigger a Firewall failover. If the HA2 Link fails and there is no HA2 Backup configured, HA members will not synchronize session and state information. Any runtime information that is normally synchronized over the HA2 link will stop synchronizing. In A/P
deployments, no state transition will take place. If you enable the HA2 Keep-alive option, then you can get with default action a critical log that ha2-keep-alive failed. Please refer to documentation: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-web-interface-help/device/device-high-availability/ha-communications

I would recommend to configure HA2 backup interface.

Kind Regards

Pavel

topic Does HA2 link failure trigger failover in General Topics

Does HA2 link failure trigger failover

Re: Does HA2 link failure trigger failover