panorama and user-id agent connections

Alex_Samad — Sun, 07 Oct 2018 00:16:42 GMT

I have a A/P clusert and I have panorama talking to it and also other PA's to distribute userid info.

Now I have agent configured from panorama to each of the management ports on the A/P cluster.

But 1 is always failing - as its the passive one,

I was thinking i should actually attach userid agent to a lo back device and have only 1 agent configured from panorama to that address.

any thoughts ??

Re: panorama and user-id agent connections

asilliker — Tue, 09 Oct 2018 22:30:54 GMT

Yes, create a DP interface that will fail over the IP between A/P, and attach a management interface profile that allows User-ID to that interface. Configure the single IP in Panorama as a User-ID agent.

topic panorama and user-id agent connections in General Topics

panorama and user-id agent connections

Re: panorama and user-id agent connections