change standalone node to HA

RakeshRanjan — Thu, 11 Apr 2019 08:49:01 GMT

I have Standalone PA 3020 up and running , is being manged by Panorama and now I need to add another PA 3020 to bring in High Availability.

Please help me with the steps that I should follow.

In Panorama We have template stack and Device group for already running standalone PA 3020.

Should I configure HA setting on both firewall and simply push the configuration from Already running PA to newly added PA 3020.?

And once COnfig Sync done, then should I nee do add new PA into existing templates stack and Devices where existing one is already running.

????

Re: change standalone node to HA

reaper — Thu, 11 Apr 2019 13:25:02 GMT

config sync only pushes local configuration

Panorama config needs to be pushed individually

You can add the new firewall to the same device group and most of the same templates (except HA and mgmt config)

if there is local config, a sync will be needed