PAN Active/Active Virtual IP?

[msmid]

I have active/active cluster and I want to have two virtual IPs for the cluster interface.

1) Are there any restrictions for number of virtual IPs (VIP) on one Active/Active cluster interface? Is it correct to have only one VIP per interface?

I have entered configuration bellow in Management GUI, committed the configuration and no error. But I get ping echo reply only for the last VIP configured.

ARP entries are seen for both VIPs?

Example (ARP Load Sharing):

Interface IP: 10.1.1.1/24, 10.1.10.1/24

VIP1: 10.1.1.10/24

VIP1: 10.1.10.10/24

[kadak]

Hello msmid,

In Layer3, we support 2 modes of operation : Floating IP and ARP load sharing.

Floating IP: Supports multiple VIPs per gateway and these can be used by hosts in the network as gateway. If failover occurs, gratuitous ARP is sent out by the functional device. Once device recovers, floating IP and VMAC will move back to the original device.

ARP load sharing: A VIP is shared among the HA peers, but each with their individual VMAC. The device that responds to the ARP request is determined by computing a hash or modulo of the source IP address of the ARP request. If link or device failure, floating IP and VMAC moves over to the functional device. Gratuitous ARP is sent out by the functional device.

Hope that helps!

Thanks and regards,

Kunal Adak