Does HA2 link failure trigger failover

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Does HA2 link failure trigger failover

L0 Member

Hi,

 

I've got firewalls in active/standby mode and  preemptive is not enabled. HA2 link flapped for around 12:47 PM  GMT and link was up at 12:52 PM GMT

 

Model : 5060

1 REPLY 1

Cyber Elite
Cyber Elite

Thank you for the post @aijazkhan06

 

the HA2 link failure does not trigger a Firewall failover. If the HA2 Link fails and there is no HA2 Backup configured, HA members will not synchronize session and state information. Any runtime information that is normally synchronized over the HA2 link will stop synchronizing. In A/P
deployments, no state transition will take place. If you enable the HA2 Keep-alive option, then you can get with default action a critical log that ha2-keep-alive failed. Please refer to documentation: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-web-interface-help/device/device-high-availabil...

 

I would recommend to configure HA2 backup interface.

 

Kind Regards

Pavel

Help the community: Like helpful comments and mark solutions.
  • 2049 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!