Does HA2 link failure trigger failover

[aijazkhan06]

Hi,

I've got firewalls in active/standby mode and  preemptive is not enabled. HA2 link flapped for around 12:47 PM  GMT and link was up at 12:52 PM GMT

Model : 5060

[PavelK]

Thank you for the post @aijazkhan06

the HA2 link failure does not trigger a Firewall failover. If the HA2 Link fails and there is no HA2 Backup configured, HA members will not synchronize session and state information. Any runtime information that is normally synchronized over the HA2 link will stop synchronizing. In A/P
deployments, no state transition will take place. If you enable the HA2 Keep-alive option, then you can get with default action a critical log that ha2-keep-alive failed. Please refer to documentation: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-web-interface-help/device/device-high-availabil...

I would recommend to configure HA2 backup interface.

Kind Regards

Pavel