How to configure basic HA lite
0
Created On 09/25/18 17:46 PM - Last Modified 07/19/22 22:12 PM
Resolution
The Palo Alto Networks PA-200 and VM-Series firewalls only support HA lite configuration without session synchronization.
Follow these steps to configure HA lite.
- Configure an interface as HA1 link. This step is optional; you can also use management interface as HA1. Go to Network > Interfaces > and select the available interface. Select the interface type as 'HA.'
- Select the interface Device > High Availability.
- Specify the IP address of the HA1 link. If HA port links are directly connected, then this IP address can be any arbitrary IP address. It just needs to be within the same subnet of the peer's HA1 control link IP address.
- Enable HA from Setup. Specify the peer HA1 IP Address.
Specify common Group ID on both units. - Specify the Device Priority.
The device with the lower numerical value, and therefore higher priority, is designated as active and
manages all traffic on the network.