- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
01-13-2025 10:17 PM
Dear Community
i have 2-PA configured as HA and need to be redundant for ISP,so i have interface from ISP-A and another one from ISP-B, and from internal service i have VM server that needs only one IP statically work with NAT and 2-Vsys,and using static route for routing, my question is how I can make some change so I can make redundant for the Uplink side and make failover when ISP-A down , all service go through ISP-B ,
01-14-2025 02:55 PM
To start with, you'll want to configure ISP redundancy. Start with https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PLL8CAO and that will get that step out of the way.
For the server, that really depends on what the server itself is doing. There's a lot of ways that you can easily accomplish this but it varies a bit depending on what your server is actually hosting.
01-15-2025 04:32 AM
thanks for reply
in my case i have already 2-Vsys and 2-Zone and each of them has the uplink and internal service different from another second Vsys,so here I am asking when i need to make these uplink's merage and shared as redundant for all Vsys i have in my environment how can make this because when asgin interface for Vsys it can't seen or shared to another Vsys ,so can keep Vsys without change for internal service and only shared the uplinks
01-15-2025 04:43 AM
thanks for reply,
in my case i have 2-Vsys and each Vsys is isolated to another with his service zone and NAT and security rules and uplink, my question here is when I need to keep this service isolated and shared only between uplinks and make it as redundant uplinks so when uplink of Vsys1 has down it can make traffic routed to the uplink for Vsys2 normally and vise versa,
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!