PA 5220 vsys HA Support

[CarloMun]

Hi,

we have a pair of PA 5220 appliances currently running only the default vsys (vsys 0) in an HA (Active / Active) Setup.

We would like to add additional vsys instances and also have each of the new instances running in a HA A/A Setup.

Would the HSCI Port (currently configured for HA2 and HA3 HA A/A Traffic/Sessions support) as well as the HA1A and HA1B ports be able to serve ALL VSYS instances running on the 2 physical appliances ? (I would expect so)

Are there any limitations that we should be aware of when deploying such scenario ?

Is there any technical documentation focusing on this ?

Thank you.

[Brandon_Wertz]

Hrmm...

Active / Active and multi-vsys on a 5220...How much are you expecting to push for throughput in each VSYS?  Are you expect each VSYS to need to talk to the other VSYS?  What stands out most to me right now is something @Remo mentioned recently in another thread, the 3.5G max of inter-vsys throughput.

[CarloMun]

Hi,

the idea is simply having an extra vsys (that is, the "default" vsys 0 and a second "vsys 1") and having both running in a HA A/A scenario. No Inter-vsys communication between the two vsys system is planned / expected.

Back to my question: is it possible to have the HA 1/2/3 traffic for both vsys systems being served physically via the same HSCI and the HA1a / HA1b links ?

More generally, can you perhaps recommend any technical guide / documentation describing in detail this very specific topic for the 5220 PA System ?

Thanks

[BPry]

@CarloMun,

HA is a system configuration, not a vsys configuration.