Heartbeat Backup showing down on both HA peers

[MarioMarquez]

I have an active passive configuration which seems to be working and has failed over successfuly in the past (possibly a year ago).  According to the PA docs I read the heart beat is a ping that runs every 1000ms.  I assume since the heartbeat backup is down on both that if the active firewall were to break right now ther would be no failover correct?

where I got my info...

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/high-availability/ha-concepts/failover

[Mick_Ball]

No you should be OK because the backup link is optional, you can go to device/high availability/control link HA1 backup and remove it if not using it.

[jprosso64]

Hello

I also have the same issue on a pair of PA-850s in Active/Passive. I am using dedicated HA1 and H2 links, but for backup HA1 and backup HA2; I am using dataplane ports ethernet1/2 and ethernet1/4. What do I do in this case that the heartbeat backup shows down?

[jprosso64]

I did flip the MGT port to dhcp and now it is ignored. I guess you need to use the MGT port for heartbeat backup. All good then!

[MP18]

You can either use Management port  as  heartbeat backup or Dedicated Data link port.

To use Management port as Heartbeat backup you need to go under

Device

High Availability

Election settings

Check the heartbeat backup.

If you want to use dedicated Data link port for heart beat backup then you can leave the above settings as unchecked.

[hchalabi]

Add the management ip addresses to the permitted ip addresses on both ends, it should bring it up

Device-Setup-Interfaces-Management then add the management ip addresses to the permitted list

Cheers

[Bryan10032]

thanks homie