topic Re: PA-3220 HA-2 Port Configuration in General Topics

PA-3220 HA-2 Port Configuration

Putmano — Thu, 11 Oct 2018 06:48:22 GMT

I have purchased a pair of PA-3220 to run as internet gateway. I planned to configure active/passive for HA but I got the status that the HA-2 link is down and I found on website we need to use HSCI port as HA-2(Data Link). Unfortunately, I haven't purchase any cable or sfp module for HSCI. So, there are any option to configuer other port as as HA-2 link? If cannot, what is the impact if we don't have HA-2 link?

Thank for your value answer before hand.

Best regards,

Mano

Re: PA-3220 HA-2 Port Configuration

OtakarKlier — Thu, 11 Oct 2018 14:18:24 GMT

Hello,

HA2 syncs the session info so in case of a failover, sessions do not get dropped. I would change it to use a standard ethernet, rj45, port.

https://www.paloaltonetworks.com/documentation/81/pan-os/pan-os/high-availability/set-up-activepassive-ha

Do the new PAN's not come with dedicated HA1 and HA2 ports?

Hope that helps.

Re: PA-3220 HA-2 Port Configuration

BPry — Thu, 11 Oct 2018 15:52:18 GMT

@OtakarKlier,

The only link that is utilized on *200 series out of the box that someone will see, until they create an additional HA interface, is hsci. That is the dedicated HA-2 link on the new gear. HA-1 will by default give you ha1-a, ha1-b, management, and the aux-1, and aux-2 if applicable on the box.

Re: PA-3220 HA-2 Port Configuration

Putmano — Thu, 11 Oct 2018 15:56:07 GMT

Dear Otakar,

Thank for your answers. There are only HA-1 A and HA-2 B and HSCI are on the box. However I have no any module for HSCI. So, I would need to create another HA 2 (Datalink) on the ethernet port.

Re: PA-3220 HA-2 Port Configuration

OtakarKlier — Thu, 11 Oct 2018 16:06:51 GMT

Its unfortunate that PAN doesnt include a cable for this and/or that your sales team didnt add it to the order.

Good Luck!