topic Re: HA failover when 1 port loses conectivity in General Topics

HA failover when 1 port loses conectivity

jloehndorf — Mon, 13 Oct 2014 20:50:13 GMT

Looking for ways to setup a PA5020 pair for HA that takes into account if the link to one interface goes down the system fail over. I have hear of possibilities of using a "HEARTBEAT" up the link to cause the failover when it fails.

Re: HA failover when 1 port loses conectivity

bat — Mon, 13 Oct 2014 20:54:25 GMT

jloehndorf

Have you checked Link Monitoring under Device > High Availability it has the condition of "Any" or "All" under link-group as shown below:

The above will cause failover if either ethernet1/3 or ethernet1/4 go down.

Any -> if any of the interfaces go down on active device a failover will occur

All -> only when all the interfaces go down failover will occur

Thanks

Re: HA failover when 1 port loses conectivity

ssharma — Mon, 13 Oct 2014 21:11:09 GMT

Hi,

You can configure that with Link monitoring. There is another option as well for path monitoring. If you are looking for option for interface then link monitoring is what you are looking for.

Here in snapshot above, I have asked firewall to monitor both ethernet 11 and 12 and if "Any" of the interface goes down, it will cause a failover. You can also configure "All" , that would mean if both 11 and 12 goes down then only failover will occur. Hope this helps. Thank you.

Re: HA failover when 1 port loses conectivity

jloehndorf — Mon, 13 Oct 2014 21:36:49 GMT

CSharma,

Thank you for the lead.

Re: HA failover when 1 port loses conectivity

jloehndorf — Mon, 13 Oct 2014 21:37:31 GMT

SSharma,

Thank you for the comment and direction.

Re: HA failover when 1 port loses conectivity

hshah — Mon, 13 Oct 2014 22:09:23 GMT

Hi Jloehndorf,

Following document has complete HA configuration with Link monitoring.

How to Configure High Availability on PAN-OS

Regards,

Hardik Shah