topic Re: PA 5220 vsys HA Support in General Topics

PA 5220 vsys HA Support

CarloMun — Tue, 30 Apr 2019 05:17:09 GMT

Hi,

we have a pair of PA 5220 appliances currently running only the default vsys (vsys 0) in an HA (Active / Active) Setup.

We would like to add additional vsys instances and also have each of the new instances running in a HA A/A Setup.

Would the HSCI Port (currently configured for HA2 and HA3 HA A/A Traffic/Sessions support) as well as the HA1A and HA1B ports be able to serve ALL VSYS instances running on the 2 physical appliances ? (I would expect so)

Are there any limitations that we should be aware of when deploying such scenario ?

Is there any technical documentation focusing on this ?

Thank you.

Re: PA 5220 vsys HA Support

Brandon_Wertz — Tue, 30 Apr 2019 12:26:23 GMT

Hrmm...

Active / Active and multi-vsys on a 5220...How much are you expecting to push for throughput in each VSYS? Are you expect each VSYS to need to talk to the other VSYS? What stands out most to me right now is something @Remo mentioned recently in another thread, the 3.5G max of inter-vsys throughput.

Re: PA 5220 vsys HA Support

CarloMun — Tue, 30 Apr 2019 12:51:04 GMT

Hi,

the idea is simply having an extra vsys (that is, the "default" vsys 0 and a second "vsys 1") and having both running in a HA A/A scenario. No Inter-vsys communication between the two vsys system is planned / expected.

Back to my question: is it possible to have the HA 1/2/3 traffic for both vsys systems being served physically via the same HSCI and the HA1a / HA1b links ?

More generally, can you perhaps recommend any technical guide / documentation describing in detail this very specific topic for the 5220 PA System ?

Thanks

Re: PA 5220 vsys HA Support

BPry — Wed, 01 May 2019 00:59:10 GMT

@CarloMun,

HA is a system configuration, not a vsys configuration.