topic Need help for HA Active/Active configuration with two ISPs with IPs in different subnets. in General Topics

Need help for HA Active/Active configuration with two ISPs with IPs in different subnets.

Gururaj — Thu, 04 Jul 2013 04:50:36 GMT

Hi All,

In below scenario firewall external interfaces of both firewall has configured with IPs in the same subnet (topology 1)what if configured with the different IPs for different ISPs (topology 2).

Kindly consider the above query all the HA Active/Active methods (Floating IP, ARP load sharing and Mixed mode of both).

Thank you,

Gururaj

Re: Need help for HA Active/Active configuration with two ISPs with IPs in different subnets.

VinceM — Thu, 04 Jul 2013 13:00:06 GMT

Hi,

Question, two different ISP ok but why are you not in private addess on your palo's outside interfaces ?

Maybe the easiest way fro you to do Activ/Activ in your case should be to do that with vwire ?? no ?

Re: Need help for HA Active/Active configuration with two ISPs with IPs in different subnets.

mikand — Thu, 04 Jul 2013 18:39:34 GMT

Also when using two or more ISPs and multihoming is to use a dynamic routing protocol such as BGP on the external interface (either in PA or perhaps even better in the routers on the outside of the PA).

Re: Need help for HA Active/Active configuration with two ISPs with IPs in different subnets.

paysafecard — Fri, 05 Jul 2013 08:14:35 GMT

Same config as we have in our office. Means two PA's with different ISP Provider on each PA's in a active/passive mode. Works only when you configure policy based forwarding on the PA's or your traffic goes elsewhere.

Re: Need help for HA Active/Active configuration with two ISPs with IPs in different subnets.

mikand — Fri, 05 Jul 2013 08:30:04 GMT

Check out these docs if they might have something interresting?