Need help for HA Active/Active configuration with two ISPs with IPs in different subnets.

[Gururaj]

Hi All,

In below scenario firewall external interfaces of both firewall has configured with IPs in the same subnet (topology 1)what if configured with the different IPs for different ISPs (topology 2).

Kindly consider the above query all the HA Active/Active methods (Floating IP, ARP load sharing and Mixed mode of both).

Thank you,

Gururaj

[VinceM]

Hi,

Question, two different ISP ok but why are you not in private addess on your palo's outside interfaces ?

Maybe the easiest way fro you to do Activ/Activ in your case should be to do that with vwire ?? no ?

V.

[mikand]

Also when using two or more ISPs and multihoming is to use a dynamic routing protocol such as BGP on the external interface (either in PA or perhaps even better in the routers on the outside of the PA).

[paysafecard]

Same config as we have in our office. Means two PA's with different ISP Provider on each PA's in a active/passive mode. Works only when you configure policy based forwarding on the PA's or your traffic goes elsewhere.

[mikand]

Check out these docs if they might have something interresting?