topic Re: HA A/A.. tunnels connecting through fixed IP and not floating IP in General Topics https://live.paloaltonetworks.com/t5/general-topics/ha-a-a-tunnels-connecting-through-fixed-ip-and-not-floating-ip/m-p/27550#M20083 <HTML><HEAD></HEAD><BODY><P><SPAN style="font-size: 11.0pt; font-family: 'Calibri','sans-serif';">Hello...I assume you have the endpoints configured to use the floating IP? In either case the floating IP will bind the preferred node so the tunnel will only be active on one node. During a fail-over the tunnel would need to be brought up manually or by generating interesting traffic that triggers the tunnel to come up. An alternative could be to set up 2 different tunnels on each node using the real IPs. Sessions using the tunnel on the failed node may still need to rebuild during a fail over. <BR /></SPAN></P></BODY></HTML> Wed, 07 Aug 2013 20:27:14 GMT jteetsel 2013-08-07T20:27:14Z HA A/A.. tunnels connecting through fixed IP and not floating IP https://live.paloaltonetworks.com/t5/general-topics/ha-a-a-tunnels-connecting-through-fixed-ip-and-not-floating-ip/m-p/27549#M20082 <HTML><HEAD></HEAD><BODY><P>Greetings,</P><P></P><P></P><P>We have our first tunnel up and running, but it’s connecting on the fixed IP address, not the floating IP. This eliminates the failover capability.</P><P></P><P>Could this be a simple configuration parameter, or a bug?</P><P></P><P>How can I fix this. I havent worked much on A/A so I am not sure how it works</P></BODY></HTML> Wed, 07 Aug 2013 14:49:52 GMT https://live.paloaltonetworks.com/t5/general-topics/ha-a-a-tunnels-connecting-through-fixed-ip-and-not-floating-ip/m-p/27549#M20082 rkamat 2013-08-07T14:49:52Z Re: HA A/A.. tunnels connecting through fixed IP and not floating IP https://live.paloaltonetworks.com/t5/general-topics/ha-a-a-tunnels-connecting-through-fixed-ip-and-not-floating-ip/m-p/27550#M20083 <HTML><HEAD></HEAD><BODY><P><SPAN style="font-size: 11.0pt; font-family: 'Calibri','sans-serif';">Hello...I assume you have the endpoints configured to use the floating IP? In either case the floating IP will bind the preferred node so the tunnel will only be active on one node. During a fail-over the tunnel would need to be brought up manually or by generating interesting traffic that triggers the tunnel to come up. An alternative could be to set up 2 different tunnels on each node using the real IPs. Sessions using the tunnel on the failed node may still need to rebuild during a fail over. <BR /></SPAN></P></BODY></HTML> Wed, 07 Aug 2013 20:27:14 GMT https://live.paloaltonetworks.com/t5/general-topics/ha-a-a-tunnels-connecting-through-fixed-ip-and-not-floating-ip/m-p/27550#M20083 jteetsel 2013-08-07T20:27:14Z