PAN 5050 HA

[markk96]

How do I cable up a pair of PALO 5050's for HA?

[HULK]

Hello markk96,

Please find below mentioned DOC, this might help you to understand/configure high-availability.

How to Configure High Availability on PAN-OS

How to Configure Basic Layer 3 HA for PAN Devices - External Cluster

How to Create an HA Backup Link

PAN-OS Administrator's Guide 6.0 (English)

Thanks

[hshah]

Hello Mark,

PAN-5050 has one HA1 port and HA2 port. connect back to back HA1 and HA2 of both the units.

Regards,

Hardik Shah

[markk96]

Thanks would that be straight through eth cable?  I do not have eyes on these they are in a remote datacenter.   Is their a guide to use HA1 and HA2?  I don't see them listed under the network tab.

[hshah]

Both straight through and cross over will work, make sure they are no longer than 100 meter.

Else there will be delay in HA updates which can cuase in consistant HA.

[HULK]

It is recommended to connect back to back between 2 firewalls.

Thanks

[markk96]

How are they configured on the PALO? I don't see them listed as network interface.

[HULK]

It's dedicated interface for HA, you will not be able to see it under Network > interfaces.

You have to configure it under Device > High-availability >set-up.

Thanks

[markk96]

I found them under the HA General tab.

Many thanks everyone. 

[hshah]

Hello HULK,

FYI, HA1 indicated in your dia. is MGMT.

Regards,

Hardik Shah

[HULK]

Opps:

Modified pic:

Thanks