https://live.paloaltonetworks.com/t5/general-topics/ha1-question/m-p/1262631#M126905 <P>Hi, I have HA1 link traversing 2 upstream routers - if one of the routers goes down, both FW lose HA1 and thus; both become Active. Is it possible to configure HA1 backup over an existing LAN side link? i.e. not using a dedicated port for this but using a sub-interface&nbsp; / existing L3 interface etc?&nbsp;</P> <P>&nbsp;</P> <P>thanks.&nbsp;</P> Mon, 24 Aug 2026 09:53:34 GMT kevinthompson.sound 2026-08-24T09:53:34Z https://live.paloaltonetworks.com/t5/general-topics/ha1-question/m-p/1262631#M126905 <P>Hi, I have HA1 link traversing 2 upstream routers - if one of the routers goes down, both FW lose HA1 and thus; both become Active. Is it possible to configure HA1 backup over an existing LAN side link? i.e. not using a dedicated port for this but using a sub-interface&nbsp; / existing L3 interface etc?&nbsp;</P> <P>&nbsp;</P> <P>thanks.&nbsp;</P> Mon, 24 Aug 2026 09:53:34 GMT https://live.paloaltonetworks.com/t5/general-topics/ha1-question/m-p/1262631#M126905 kevinthompson.sound 2026-08-24T09:53:34Z https://live.paloaltonetworks.com/t5/general-topics/ha1-question/m-p/1262670#M126910 <P>There's literally config right next to your HA1 for an HA1 backup.&nbsp; Also, your deployed design of having your primary HA1 interface being over a routed link goes against the stated design of how your primary HA1 interface should be.</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Brandon_Wertz_0-1787581675594.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/72330i08F6D5EEBC180B9E/image-size/medium?v=v2&amp;px=400" role="button" title="Brandon_Wertz_0-1787581675594.png" alt="Brandon_Wertz_0-1787581675594.png" /></span></P> <P>&nbsp;</P> <P>"Heartbeat Backup", using your management interface is also a failsafe that you should have configured.&nbsp; Which prevents split-brain.</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Brandon_Wertz_1-1787581969975.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/72331iCE562C57A77BF550/image-size/medium?v=v2&amp;px=400" role="button" title="Brandon_Wertz_1-1787581969975.png" alt="Brandon_Wertz_1-1787581969975.png" /></span></P> <P>&nbsp;</P> Mon, 24 Aug 2026 14:32:58 GMT https://live.paloaltonetworks.com/t5/general-topics/ha1-question/m-p/1262670#M126910 Brandon_Wertz 2026-08-24T14:32:58Z