topic Re: Is it possible to login to the passive device in HA without using mgmt port? in General Topics

Is it possible to login to the passive device in HA without using mgmt port?

Masaru_Ishii — Tue, 28 Jun 2016 23:49:53 GMT

Hi.

Is it possible to login to the passive device in HA without using mgmt port?

Is console port only approach?

Is there no approach to login to the passive device in ha except mgt-port or cosole-port?

plese tell me...

Re: Is it possible to login to the passive device in HA without using mgmt port?

pankaku — Wed, 29 Jun 2016 00:24:44 GMT

Console and management interface are the only options. If firewall are in Acitve-active then we may use data interface to access firewall.

Re: Is it possible to login to the passive device in HA without using mgmt port?

Masaru_Ishii — Wed, 29 Jun 2016 01:09:05 GMT

Thank you very much for your help.

Re: Is it possible to login to the passive device in HA without using mgmt port?

alowther_chatham — Wed, 29 Jun 2016 17:26:00 GMT

You may be able to SSH from the active device to the passive device. I found this out when I didn't want to use the MGMT interfaces. I quickly found out using MGMT interfaces was much, much better.

I think this worked with my PA-200s, because their MGMT port/address is also the HA port/address. This did not work with my PA-3020s which have dedicated HA ports.

For example, if there is a management profile on the inside interface that allows SSH. You can SSH into the active device only using the inside IP. You can then hop into the passive device using the HA peer IP.

Re: Is it possible to login to the passive device in HA without using mgmt port?

Masaru_Ishii — Thu, 07 Jul 2016 07:06:41 GMT

My apologies for the late reply.

My device which is PA-5050 will not work.....

Thank you for the valuable information!

Re: Is it possible to login to the passive device in HA without using mgmt port?

Suryajith — Thu, 02 Mar 2023 10:02:16 GMT

am not able get the console of passive device in the HA