topic Re: Active/Active HA managed by Panorama in General Topics

Active/Active HA managed by Panorama

howardtopher — Tue, 23 Aug 2016 14:45:41 GMT

In the Active/Active HA setup, there is an option to "Enable Config Sync". In the past I have used this because I didn't have Panorama. Now I have a new set of PA5050s that are running in Active/Active mode and we purchased Panorama to go with it. My question is should I enable the config sync? Or should I disable it since Panorama pushes to each device individually? I'm not able to find any documentation recommending one way or the other.

Re: Active/Active HA managed by Panorama

bmorris1 — Tue, 23 Aug 2016 15:00:24 GMT

Hi,

From what I can see, the documentation recommends that this be turned on. This is from the help guide:

'Enable Config Sync—Select this option to enable synchronization of configuration settings between the peers. As a best practice, config sync should always be enabled.'

hope this helps,

Ben

Re: Active/Active HA managed by Panorama

rob72 — Wed, 24 Aug 2016 04:19:38 GMT

You should enable config sync. Some aspects of the Active-Active configuration may be best managed locally on the devices themselves, in this case you will need config sync.