HA Configuration Between the Buildings with Dark Fiber availability

[AvinashKukkapalli]

Hai Team,

  We have two building next to each other and we have dark fiber connectivity between them.

I would like to know how do we configure HA betweeen them. how do i make use of dedicated HA ports.

Firewall models  PA-3020 runn ing 8.0.7

[reaper]

This topic asks the same question:

https://live.paloaltonetworks.com/t5/General-Topics/HA-system-separated-with-two-datacenters/m-p/114...

if you just make sure your HA links are put in a vlan and transport that vlan across the dark fiber, you will be able to do this

[BPry]

@AvinashKukkapalli,

If you don't have a spare set of strands to dedicate to HA you can pass it through a switch as @reaper mentioned, or if you do have a spare strand you can simply make a direct connection to the HA port without any additional equipment or configuration. Either method works perfectly fine. 

[OtakarKlier]

Hello,

Also make sure you have redundancy for your HA links. If one or both of the switches goes down, you could have a split-brain scenario where both PAN's are active until connectivity for the HA links is restored. I would suggest using device priority for this reason for when connectivity is restored.

Regards,