topic can we configure a data interface to perform HA path monitoring? in General Topics

can we configure a data interface to perform HA path monitoring?

SThatipelly — Mon, 06 Jan 2020 14:25:26 GMT

I would like to configure HA failover condition that utilizes my data interface to perform path monitoring. this way, firewalls will failover when there is a routing issue. I don't see an option to use a source interface/ IP under HA-path Monitoring-Add virtual router path.

is there any way to accomplish this?

Thanks.

Re: can we configure a data interface to perform HA path monitoring?

OtakarKlier — Mon, 06 Jan 2020 17:19:20 GMT

Hello,

Please check these out and see if htey help.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClG7CAK

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PMscCAG

Regards,

Re: can we configure a data interface to perform HA path monitoring?

SThatipelly — Tue, 07 Jan 2020 13:40:50 GMT

@OtakarKlier thanks for sharing the links. Unfortunately, those 2 articles donot have the info I am looking for.

Re: can we configure a data interface to perform HA path monitoring?

OtakarKlier — Tue, 07 Jan 2020 15:21:45 GMT

Hello,

Sorry I must have misread the original question. So no you cannot use a source interface. When you select VirtualRouter as a path, the ping will be sourced from it and it will determine the exit interface to check the path.

Hope that makes sense.

Re: can we configure a data interface to perform HA path monitoring?

SThatipelly — Tue, 07 Jan 2020 19:29:19 GMT

@OtakarKlier I have defined my data interfaces in the virtual router configuration. does that mean the pings will be sourced through them but not Management port?

Re: can we configure a data interface to perform HA path monitoring?

OtakarKlier — Tue, 07 Jan 2020 23:13:40 GMT

Hello,

Per the help documentation:

The source IP address for path groups associated with virtual routers will be automatically configured as the interface IP address that is indicated in the route table as the egress interface for the specified destination IP address.

Hope that helps!