05-26-2021 06:42 AM
What is the advantage of using the HSCI port for HA2 as opposed to using one or two data ports?
Would a QSFP-40G-CR4 be compatible with the HSCI port?
Or a SFP-H10GB-AOC5M? SFP-1000BAS?
05-26-2021 06:58 PM
Keep in mind that the HSCI interfaces actually differ between models. So on the PA-3200 series it's all SFP+, on a 5220 it's QSFP+, but all other 52** models it's a QSFP28 ports.
@MichaelMedwid wrote:
What is the advantage of using the HSCI port for HA2 as opposed to using one or two data ports?
The HSCI port carries raw traffic that are fully meant to be directly connected to each other. The firewall actually treats this traffic very much the same as the management port, something it can't do when you setup a dataplane port as an HA interface. Functionally, I can't say that I've ever ran into a situation outside of the 7000-series where either option doesn't work perfectly fine.
If your environment supports HSCI I would use it. If you choose to locate your firewall peers in different buildings that don't have the infrastructure to support a direct connection as HSCI demands without going through a switch, or fiber infrastructure that wasn't built around supporting QSFP then just use dataplane interfaces.
05-26-2021 06:58 PM
Keep in mind that the HSCI interfaces actually differ between models. So on the PA-3200 series it's all SFP+, on a 5220 it's QSFP+, but all other 52** models it's a QSFP28 ports.
@MichaelMedwid wrote:
What is the advantage of using the HSCI port for HA2 as opposed to using one or two data ports?
The HSCI port carries raw traffic that are fully meant to be directly connected to each other. The firewall actually treats this traffic very much the same as the management port, something it can't do when you setup a dataplane port as an HA interface. Functionally, I can't say that I've ever ran into a situation outside of the 7000-series where either option doesn't work perfectly fine.
If your environment supports HSCI I would use it. If you choose to locate your firewall peers in different buildings that don't have the infrastructure to support a direct connection as HSCI demands without going through a switch, or fiber infrastructure that wasn't built around supporting QSFP then just use dataplane interfaces.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
