Doubt configuration HA Paloalto-Aruba

[Alpalo]

Hello to all

I have a pair of FW PA-460 active-passive. When we perform Failover I lose 40 seconds the network to the internet. i have only HA1 connected on a pair of SW aruba. I suspect it may be an Aruba or Paloalto configuration issue. Any idea?

Best regards.

[OtakarKlier]

Hello,

I think these articles may be useful.

Layer 3 High Availability with Optimal Failover Times Best Practices

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClHnCAK

Resource List: High Availability Configuring and Troubleshooting

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClIbCAK

Regards,

[PavelK]

Hello @Alpalo

have you enabled Passive Link State to Auto?

Here are references:

What is the corresponding link state when the passive link state is set to auto?

Configure Active/Passive HA

Setting the link state to Auto allows for reducing the amount of time it takes for the passive firewall to take over when a failover occurs.

Kind Regards

Pavel
  

[Alpalo]

Hi @PavelK 

Hi @PavelK

Yes, I have enabled auto mode, but the problem persists, we only have HA1 enabled, I don't know if the problem is related to it.

HA1 is connected to the aruba pair switch with LACP . any other idea?

Thank you very much