Change HA setup A-A to A-P

[krlinks]

Good Day. I am looking for pointers wrt changing the HA setup from A-A to A-P mode.

The existing setup is for PA-5200s and they are in A-A mode with floating IP bind to active-primary (logically active-passive) and the HA setting is locally managed.

Both the FWs are connected to panorama and they have unique interface IPs and dedicated templates. 

Will the below steps help to achieve the HA setup changed as A-P and managed from the panorama template?

1. Break the HA setup and isolate secondary FW.
2. remove the HA config on the secondary firewall and do a local commit.
3. update the interface IPs of secondary FW with existing floating IPs.
4. commit & push to secondary FW
5. Disconnect the primary FW LAN connections to ensure the secondary receives the traffic from switches as they by default forward traffic to the virtual IPs
6. remove the existing template for the primary firewall and add the firewall to the secondary firewall template
7. add HA configs from panorama and push to both devices.

[JayGolf]

Hi @krlinks ,

Here is a related thread with a recommendation.