Failover of IPSEC Tunnels from active to Passive Firewall

[RamKarthik]

Hello,

I have a setup of Two AWS_VM-Series_Palo Alto devices, which are acting as Standalone firewalls but as Primary and Secondary respectively on AWS. Due to some limitations, I cannot configure HA between them, however there is a tunnel connecting these two firewalls for manual traffic failover. Now I would like to setup tunnel monitoring and automatic failover of IPSEC tunnels (with BGP routing) from Primary to Secondary firewall, in case of a tunnel failure on Primary firewall

Any suggestions/examples of such a configuration would be helpful.

[RamprakashRT]

HI ,

When you are using BGP tunnel monitoring is not required for failover . Create export and import priority in BGP for Active and Passive tunnels. It should work seamless. Please try and let me know,

Thanks,

Ram