Is it possible to have 4 devices as active/active setup?

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Is it possible to have 4 devices as active/active setup?

Not applicable

Am I able to configure up to 4 devices to act as active/active in high availability?

This should be able to, if one of those 4 get down, the others 3 keep handling traffic. And if another one of those get down, the other 2 keep running and so on.

Is it possible? If it is not, is there any roadmap for so?

5 REPLIES 5

L1 Bithead

This is not possible using the existing HA functionality. I cannot speak to the roadmap though...

L0 Member

You could configure four stand-alone devices, each on a separate leg of a aggregated ethernet link to achieve a similar result.  It is very similar to the published solution working with Arista switches show here:https://paloaltonetworks.com/content/dam/paloaltonetworks-com/en_US/assets/pdf/technology-solutions-...

L7 Applicator

All clusters in PA are just two identical units.  You could have two pairs with the four units but the sessions and sync are only between the tow matched devices at a time.

This is unlikely to change in the next few years.

For  a very large volume operation you might use load balancers in front of the four or more PA to get higher capacity and failover across multiple clusters.

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center

L0 Member

Palo Alto Networks devices do not aggregate throughput across HA cluster members.  Active/Active throughput is same as Active/Passive. For situations in which more throughput than a PA-5060 can provide is required you would utilize the PA-7000 series chassis system.  With two chassis you can have anywhere between two and ten data plane cards, each capable of processing around the same traffic as a PA-5060.  This scenario would not require third party load balancers and provides increased flexibility over that model. Session sync across all dataplanes in both chassis regardless of Layer 3 or Virtual Wire deployments.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!