Panorama HA Config question

a.jones — Wed, 22 Jan 2020 07:16:02 GMT

Hi All,

Quick question on my new deployment for Panorama. I have a HA pair with unique hostnames and IP addresses with firewall as an active passive pair. The migration steps state the following:

Do not combine the HA firewall pair in to a single template if a unique Hostname, management IP address, or HA configuration is configured for each HA peer. You may also configure a unique Hostname, management IP address, or HA configuration locally on the firewalls.

What do I need to do to accommodate this? I may be having a "stupid" moment but the documentation is not 100% clear (bad night and 6.30am). Using this document:

https://docs.paloaltonetworks.com/panorama/8-1/panorama-admin/manage-firewalls/transition-a-firewall-to-panorama-management/migrate-a-firewall-ha-pair-to-panorama-management.html#id177DF10905Z

Regards

Adrian

Re: Panorama HA Config question

reaper — Wed, 22 Jan 2020 08:38:06 GMT

you cant use the same template for hostname, ip and HA (priority) for both members as that would cause a conflict, so there are 2 options:

- you create a unique template for each member that contains it's HA config, ip and hostname, or

- you dont include these parameters in the template and configure them locally

topic Re: Panorama HA Config question in General Topics

Panorama HA Config question

Re: Panorama HA Config question