Change HA setup A-A to A-P

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Change HA setup A-A to A-P

L0 Member

Good Day. I am looking for pointers wrt changing the HA setup from A-A to A-P mode.

The existing setup is for PA-5200s and they are in A-A mode with floating IP bind to active-primary (logically active-passive) and the HA setting is locally managed.

Both the FWs are connected to panorama and they have unique interface IPs and dedicated templates. 

Will the below steps help to achieve the HA setup changed as A-P and managed from the panorama template?

 

  1. Break the HA setup and isolate secondary FW.
  2. remove the HA config on the secondary firewall and do a local commit.
  3. update the interface IPs of secondary FW with existing floating IPs.
  4. commit & push to secondary FW
  5. Disconnect the primary FW LAN connections to ensure the secondary receives the traffic from switches as they by default forward traffic to the virtual IPs
  6. remove the existing template for the primary firewall and add the firewall to the secondary firewall template
  7. add HA configs from panorama and push to both devices.
1 REPLY 1

Community Team Member

Hi @krlinks ,

 

Here is a related thread with a recommendation.

LIVEcommunity team member
Stay Secure,
Jay
Don't forget to Like items if a post is helpful to you!

Please help out other users and “Accept as Solution” if a post helps solve your problem !

Read more about how and why to accept solutions.
  • 813 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!