topic Re: PAN HA with different SFPs in General Topics

PAN HA with different SFPs

PA_nts — Thu, 30 Nov 2023 12:48:47 GMT

Hi Guys

quick question.. planning a pair of PA 5420's in HA - the plan was for each to have a 40gb QSFP+ module.

however on our secondary core switch we are unable to source a 40gb sfp in time.

So.. as a temp solution, will HA work if we have a 40GB QSFP+ module on FW1 connecting to 40GB sfp on Core1 and a 10GB SFP on the FW2 connecting to 10gb sfp on core 2?

or limited due to the fact that hardware has to be a 100% match?

thanks in adv

Re: PAN HA with different SFPs

kiwi — Wed, 06 Dec 2023 14:03:22 GMT

Hi @PA_nts ,

I haven't tested it myself but here are the prerequisites for HA (active-passive):

https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/high-availability/set-up-activepassive-ha/prerequisites-for-activepassive-ha

Kind regards,

-Kim.

Re: PAN HA with different SFPs

PA_nts — Thu, 07 Dec 2023 05:50:27 GMT

Thanks Kim,

I did read that but it does not state the actual interface type.. i would hazard a guess that if one interface is running 40GB and another 10GB.. that would be a trigger for HA to fail. so will take it as that, not supported to be on the safe side :- )

thanks

Re: PAN HA with different SFPs

OtakarKlier — Thu, 07 Dec 2023 20:04:02 GMT

Hello,

Why not just connect the two PAN's directly and not use a switch, its HA not passthrough traffic?

Regards,