10-13-2014 01:50 PM
Looking for ways to setup a PA5020 pair for HA that takes into account if the link to one interface goes down the system fail over. I have hear of possibilities of using a "HEARTBEAT" up the link to cause the failover when it fails.
10-13-2014 01:54 PM
Have you checked Link Monitoring under Device > High Availability it has the condition of "Any" or "All" under link-group as shown below:
The above will cause failover if either ethernet1/3 or ethernet1/4 go down.
Any -> if any of the interfaces go down on active device a failover will occur
All -> only when all the interfaces go down failover will occur
10-13-2014 02:11 PM
You can configure that with Link monitoring. There is another option as well for path monitoring. If you are looking for option for interface then link monitoring is what you are looking for.
Here in snapshot above, I have asked firewall to monitor both ethernet 11 and 12 and if "Any" of the interface goes down, it will cause a failover. You can also configure "All" , that would mean if both 11 and 12 goes down then only failover will occur. Hope this helps. Thank you.
10-13-2014 02:36 PM
Thank you for the lead.
10-13-2014 02:37 PM
Thank you for the comment and direction.
10-13-2014 03:09 PM
Following document has complete HA configuration with Link monitoring.
How to Configure High Availability on PAN-OS
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!