topic Question About HA Failover (Require Assistance On Urgent Basis) in General Topics

Question About HA Failover (Require Assistance On Urgent Basis)

Sethupathi — Wed, 05 Jun 2019 08:00:35 GMT

Hi Team,

Can anyone provide your valuable suggestion here please?

As per the below diagram, we have a active|passive HA setup both active & passive devices are connected in different switches.

My query is if a active firewall uplink port went down, Does failover will happen or not?,

My understanding is if the Failover takes place only when active FW device goes down (is that correct)

Can we configure a failover when active FW uplink port (internet line) goes down?? If yes how to do that..?? should we need to make any changes on the mentioned network diagram?

Requirment is Active firewall uplink port goes down fail over should happend, Can we do that with this Active|Passive setup? If yes, what changes do we need to do with this diagrame or firewall configuration?
If no can we go for active|active HA?

Assistance on high priority will be appreciated.

Regards,
Sethupathi M
+91-9384880169

Re: Question About HA Failover (Require Assistance On Urgent Basis)

patmal — Wed, 05 Jun 2019 08:19:32 GMT

You need to configure link monitoring see here for more information https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-admin/high-availability/define-ha-failover-conditions

Re: Question About HA Failover (Require Assistance On Urgent Basis)

OtakarKlier — Thu, 06 Jun 2019 18:36:03 GMT

Hello,

Also look into path monitoring. This way if there is an issue in the path of the device, it will also fail over.

Regards,