Deploying Panorama M-100 in HA mode

ChristerJohanssonR — Tue, 24 Feb 2015 08:00:34 GMT

I have purchased two (2) Panorama devices M-100 to be setup in HA-mode.

A couple of questions:

a) There are two interfaces in the front. One for Management, but what is the second one (the one to the right) used for?

b) The devices are "active/passive" or actually "primary/seconday" with a management address of its own. Which address do I put on the firewalls' "Panorama setting"? The primary or secondary?

Sorry for these noob-questions.

//Christer J.

Re: Deploying Panorama M-100 in HA mode

ssharma — Tue, 24 Feb 2015 13:29:12 GMT

Hi,

Other interface is like an secondary interface that you can make use of if you are using 6.1.0 and above. This is used to send other syslog messages if you are forwarding them from Panorama. This is useful in a situation where there are significant load for the single management interface. This is an optional configuration.

It is combination of both. Primary and Secondary describes the priority and Active-Passive defines there current role. To make any changes to firewall from Panorama, Panorama in question needs to be active mode. Unlike regular active passive, you will see prompt

admin@M-100 (primary-active)>

Hope this helps. Thank you.

topic Deploying Panorama M-100 in HA mode in General Topics

Deploying Panorama M-100 in HA mode

Re: Deploying Panorama M-100 in HA mode