Is it possible to login to the passive device in HA without using mgmt port?

[Masaru_Ishii]

Hi.

Is it possible to login to the passive device in HA without using mgmt port?

Is console port only approach?

Is there  no approach to login to the passive device in ha except mgt-port or cosole-port?

plese tell me...

[pankaku · Accepted solution]

Console and management interface are the only options. If firewall are in Acitve-active then we may use data interface to access firewall.

[Masaru_Ishii]

Thank you very much for your help.

[alowther_chatham]

You may be able to SSH from the active device to the passive device.  I found this out when I didn't want to use the MGMT interfaces.  I quickly found out using MGMT interfaces was much, much better.

I think this worked with my PA-200s, because their MGMT port/address is also the HA port/address.  This did not work with my PA-3020s which have dedicated HA ports.

For example, if there is a management profile on the inside interface that allows SSH.  You can SSH into the active device only using the inside IP.  You can then hop into the passive device using the HA peer IP.

[Masaru_Ishii]

My apologies for the late reply.

My device which is PA-5050 will not work.....

Thank you for the valuable information!

[Suryajith]

am not able get the console of passive device in the HA