topic Re: configure ha in different locations in General Topics

configure ha in different locations

Yenn_Alfredo — Thu, 05 Sep 2024 15:14:55 GMT

hi,

I have 2 palo alto and I have them in different buildings and I want to set up an HA between them how can I do it without just pulling a direct cable I want it to go through the network infrastructure.

Kind regards

Re: configure ha in different locations

Brandon_Wertz — Thu, 05 Sep 2024 16:20:57 GMT

@Yenn_Alfredo wrote:

hi,

I have 2 palo alto and I have them in different buildings and I want to set up an HA between them how can I do it without just pulling a direct cable I want it to go through the network infrastructure.

Kind regards

Easy. Somewhat...There are some prerequisites mainly you need some sort of wired connectivity between the 2 locations. Either the 2 locations need to be apart of the same L2 domain or you need dedicated wired connectivity that you can use to essentially connect the 2 devices together.

Over this L2 extension or dedicated connectivity connect HA1 ports together then for HA2 take one of your data ports set to HA and use this port in your HA config.

I followed this methodology to HA Pair 5060s/5220s across ~200 miles and had zero issues.

Re: configure ha in different locations

Yenn_Alfredo — Fri, 06 Sep 2024 08:38:09 GMT

hi,

Do you know where I could locate a procedure where I can see how to set it up.

Kind regards

Re: configure ha in different locations

Brandon_Wertz — Fri, 06 Sep 2024 20:45:49 GMT

@Yenn_Alfredo wrote:

hi,

Do you know where I could locate a procedure where I can see how to set it up.

Kind regards

Not really it's kinda our job as the firewall admin to know how to do these things. That said a lot of what is needed would be here: https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/high-availability/set-up-activepassive-ha/configure-activepassive-ha but setting and specific will take decisions and information from you.