topic Re: HA Configuration Between the Buildings with Dark Fiber availability in General Topics

HA Configuration Between the Buildings with Dark Fiber availability

AvinashKukkapalli — Fri, 15 Mar 2019 06:03:30 GMT

Hai Team,

We have two building next to each other and we have dark fiber connectivity between them.

I would like to know how do we configure HA betweeen them. how do i make use of dedicated HA ports.

Firewall models PA-3020 runn ing 8.0.7

Re: HA Configuration Between the Buildings with Dark Fiber availability

reaper — Fri, 15 Mar 2019 14:04:06 GMT

This topic asks the same question:

https://live.paloaltonetworks.com/t5/General-Topics/HA-system-separated-with-two-datacenters/m-p/11452#M8438

if you just make sure your HA links are put in a vlan and transport that vlan across the dark fiber, you will be able to do this

Re: HA Configuration Between the Buildings with Dark Fiber availability

BPry — Fri, 15 Mar 2019 14:25:52 GMT

@AvinashKukkapalli,

If you don't have a spare set of strands to dedicate to HA you can pass it through a switch as @reaper mentioned, or if you do have a spare strand you can simply make a direct connection to the HA port without any additional equipment or configuration. Either method works perfectly fine.

Re: HA Configuration Between the Buildings with Dark Fiber availability

OtakarKlier — Fri, 15 Mar 2019 14:44:31 GMT

Hello,

Also make sure you have redundancy for your HA links. If one or both of the switches goes down, you could have a split-brain scenario where both PAN's are active until connectivity for the HA links is restored. I would suggest using device priority for this reason for when connectivity is restored.

Regards,