can we configure a data interface to perform HA path monitoring?

[SThatipelly]

I would like to configure HA failover condition that utilizes my data interface to perform path monitoring. this way, firewalls will failover when there is a routing issue. I don't see an option to use a source interface/ IP under HA-path Monitoring-Add virtual router path.

is there any way to accomplish this?

Thanks.

[OtakarKlier]

Hello,

Please check these out and see if htey help.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClG7CAK

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PMscCAG

Regards,

[SThatipelly]

@OtakarKlier thanks for sharing the links. Unfortunately, those 2 articles donot have the info I am looking for.

[OtakarKlier]

Hello,

Sorry I must have misread the original question. So no you cannot use a source interface. When you select VirtualRouter as a path, the ping will be sourced from it and it will determine the exit interface to check the path.

Hope that makes sense.

[SThatipelly]

@OtakarKlier I have defined my data interfaces in the virtual router configuration. does that mean the pings will be sourced through them but not Management port?

[OtakarKlier · Accepted solution]

Hello,

Per the help documentation:

The source IP address for path groups associated with virtual routers will be automatically configured as the interface IP address that is indicated in the route table as the egress interface for the specified destination IP address.

Hope that helps!