How to configure dual PA-3050 HA with different ISP

Showing results for 
Show  only  | Search instead for 
Did you mean: 

How to configure dual PA-3050 HA with different ISP

L0 Member

Dear all,

We have a scenario that have 2 PA-3050 in HA but using different ISP , HA01 is having ip 1.227.XX.XX which is already conneted to internet but HA02 is not setup yet for the internet (Because both are in HA, if we modify the setting, will affect the port and the config).

Both are using ethernet 1/3 and have ethenert 11, and 12 for HA link.


Is there a way to setup HA2 to use different ISP in case HA1 fails? Thanks for the support.



Cyber Elite
Cyber Elite



are both peers in a different physical location?

I would recommend connecting both ISPs to both peers, so in case ISP1 fails, you don't need a complete HA failover simply to be able to use ISP2


you can setup ,for example, ISP1 as the default gateway with lowest metric, ISP2 with higer metric and use PBF to direct some applications/sessions to ISP2 by default

if ISP1 fails, all traffic will default to ISP2, if ISP2 fails, the PBF traffic will default to ISP1, and your cluster does not need to fail over

Tom Piens
PANgurus - SASE and Strata specialist; (co)managed services, VAR and consultancy
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!