HA traffic "HSCI" over Switch

[mmarie]

Hi

Can i use cisco switch as layer 2 between two PA-3410 for HA ports "HSCI" . as i need to connect the HA ports between two building using the dark fiber.

Appreciate your support

Thanks

[OtakarKlier · Accepted solution]

Hello,

Dont think you will be able to:

• HSCI—The HSCI port is a Layer 1 SFP+ interface that connects two PA-3200 Series firewalls in an HA configuration. Use this port for an HA2 connection, HA3 connection, or both.
  The traffic carried on the HSCI ports is raw Layer 1 traffic, which is not routable or switchable. Therefore, you must connect the HSCI ports directly to each other (from the HSCI port on the first firewall to the HSCI port on the second firewall).

https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/high-availability/ha-concepts/ha-links-an...

If running active/passive, you can use one of the other port types for HA traffic to get what you need.

Regards,

[mmarie]

Thank you @OtakarKlier 

[OtakarKlier]

Hello,

Might also want to read up on 'Clustering' if that will work for you?

https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/high-availability/configure-ha-clustering

Regards,