topic Re: Configuring a fiber port for HA in General Topics

Configuring a fiber port for HA

DendreT — Fri, 18 May 2012 10:35:38 GMT

Is it possible to configure a fiber port to act as a HA port.

Re: Configuring a fiber port for HA

essnet — Fri, 18 May 2012 13:29:09 GMT

I didn't do it myself but I didn't read anything about a limitation on fiber + aggregation.

Re: Configuring a fiber port for HA

DendreT — Fri, 18 May 2012 14:05:31 GMT

Not sure!!!! have a client that has fiber only to his units and I am not keen to use converters to connect to the HA ports.....

Thanks for the feedback.

Re: Configuring a fiber port for HA

essnet — Fri, 18 May 2012 14:09:36 GMT

Oh you mean HA in PaloAlto terms, I was thinking about ports aggregation (Port-channel etc ...)

Re: Configuring a fiber port for HA

mikand — Fri, 18 May 2012 18:19:01 GMT

I think that you use dataplane for HA for 2000 series and smaller models while there are dedicated HA interfaces (directly connected to the mgmtplane) on 4000 series and upwards.

The point here is that when using dataplane for HA (which is possible on 4000 and upwards) you might end up with a "firewall flap" in case you restart the dataplane when in HA mode.

For 4000 and upwards using one or more interfaces on the dataplane for HA is mainly for redundancy reasons (in case one of the physical HA interfaces fails).

Unfortunately none of the HA interfaces is SFP/SFP+ today (hopefully future models will have this option) but given the above I _think_ it should work for you to use one (or more) of the dataplane interfaces (SFP/SFP+) as HA interface to avoid external fiber converters.

Re: Configuring a fiber port for HA

DendreT — Mon, 21 May 2012 08:07:14 GMT

Thank you for the feedback!!!!

Regards