configure ha in different locations

[Yenn_Alfredo]

hi,

I have 2 palo alto and I have them in different buildings and I want to set up an HA between them how can I do it without just pulling a direct cable I want it to go through the network infrastructure.

Kind regards

[Brandon_Wertz]

---

@Yenn_Alfredo wrote:

hi,

I have 2 palo alto and I have them in different buildings and I want to set up an HA between them how can I do it without just pulling a direct cable I want it to go through the network infrastructure.

Kind regards

---

Easy.  Somewhat...There are some prerequisites mainly you need some sort of wired connectivity between the 2 locations.  Either the 2 locations need to be apart of the same L2 domain or you need dedicated wired connectivity that you can use to essentially connect the 2 devices together.

Over this L2 extension or dedicated connectivity connect HA1 ports together then for HA2 take one of your data ports set to HA and use this port in your HA config.

I followed this methodology to HA Pair 5060s/5220s across ~200 miles and had zero issues.

[Yenn_Alfredo]

hi,

Do you know where I could locate a procedure where I can see how to set it up.

Kind regards

[Brandon_Wertz]

---

@Yenn_Alfredo wrote:

hi,

Do you know where I could locate a procedure where I can see how to set it up.

Kind regards

---

Not really it's kinda our job as the firewall admin to know how to do these things.  That said a lot of what is needed would be here:  https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/high-availability/set-up-activepassive-ha... but setting and specific will take decisions and information from you.