PAN HA with different SFPs

[PA_nts]

Hi Guys

quick question.. planning a pair of PA 5420's in HA - the plan was for each to have a 40gb QSFP+ module.

however on our secondary core switch we are unable to source a 40gb sfp in time.

So.. as a temp solution, will HA work if we have a 40GB QSFP+ module on FW1 connecting to 40GB sfp on Core1 and a 10GB SFP on the FW2 connecting to 10gb sfp on core 2?

or limited due to the fact that hardware has to be a 100% match?

thanks in adv

[kiwi]

Hi @PA_nts ,

I haven't tested it myself but here are the prerequisites for HA (active-passive):

https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/high-availability/set-up-activepassive-ha...

Kind regards,

-Kim.

[PA_nts]

Thanks Kim,

I did read that but it does not state the actual interface type.. i would hazard a guess that if one interface is running 40GB and another 10GB.. that would be a trigger for HA to fail. so will take it as that, not supported to be on the safe side :- )

thanks

thanks

[OtakarKlier]

Hello,

Why not just connect the two PAN's directly and not use a switch, its HA not passthrough traffic?

Regards,