topic Re: Poor Man's HA in General Topics

Poor Man's HA

Filip_Fronczak — Thu, 22 Nov 2018 19:16:50 GMT

Hi,

We have 2 PA VM100 devices. For some reasons we are not able to configure more network interfaces at the moment.

Can I create an active-passive HA cluster just using the Management interfaces in the way that the second device receives all configuration updates from the first device and is ready to be "activated" manually in case of failure of the first server?

I will be gratful for a simple how-to if this is possible.

Thank you.

Re: Poor Man's HA

Remo — Thu, 22 Nov 2018 19:44:36 GMT

Hi @Filip_Fronczak

Yes, this should be possible. You don't even have to activate it manually in case of failure. The failover happens automatically if there are problems with the firewall/interfaces or a path monitor. The only thing you don't have is session sync.

Configure HA as you would normally (there are how tos in the official paloalto documentation) but use the mgmt port as HA1 and don't configure HA2. That's it already.