PA 3260 and using non dedicated as HA1 interface

[MP18]

We have 2 PA 3260  across Data Centres.

We tried to use Eth1/13 as HA1 port but under ha1 interfaces it does not show option to choose  eth1/13.

IS this by design that HA1 interface to be dedicated?

for now we used management as ha1 interface.

is this good to use management interface as ha1?

Regards

Mike

[Remo]

Did you configure eth1/13 as HA interface prior to selecting it in the HA config?

(I normally use the mgmt port as HA1 backup port in addition to either one of the dedicated or a DP interfaces)

[MP18]

Yes i config eth1/13 as HA interface.

[Brandon_Wertz]

---

@MP18 wrote:

We have 2 PA 3260  across Data Centres.

We tried to use Eth1/13 as HA1 port but under ha1 interfaces it does not show option to choose  eth1/13.

IS this by design that HA1 interface to be dedicated?

for now we used management as ha1 interface.

is this good to use management interface as ha1?

Regards

Mike

---

Why can't you use the HA1 port even if the firewalls are across DCs?  (I'm guessing you're needing a fiber connection?)  

I've got a 5220 pair spreed across 2 DCs that are 800+ miles apart using HA1 in a switched environment w/o issue.

[MP18]

Yes it is a fiber connection connection between our Data centres for HA!

[Brandon_Wertz]

---

@MP18 wrote:

Yes it is a fiber connection connection between our Data centres for HA!

---

Can you land this fiber into a switch?  Then plug copper from the switch into HA1?

[BPry]

@MP18 

The 3200 series, much like the 5200 series, will only allow ha1-a, ha1-b or management to be utilized for HA1. The 5200 series has the advantage of being able to utilize the aux-1 and aux-2 ports as HA1 interfaces. 

In this type of situation, I would recommend doing exactly what @Brandon_Wertz is saying and simply running HA1 through a switch and passing it to the PA as a copper handoff; this works perfectly fine and I'd recommend it before setting HA1 to the management interface. 

[MP18]

We are also checking with our PA SE if this is due to hardware or software.

Will keep everyone updated once we hear  from him

[jerome.popieul]

Hi,
I don't know if this is a new feature not available back in 2020, but we could run HA1a and HA1b direct FW to FW over fiber on a PA-3260 without issue. (using ethx.x interfaces)
Hope this could help if you want to avoid having a switch in the middle.

Regards.