10-06-2018 05:16 PM
Hi
I have a A/P clusert and I have panorama talking to it and also other PA's to distribute userid info.
Now I have agent configured from panorama to each of the management ports on the A/P cluster.
But 1 is always failing - as its the passive one,
I was thinking i should actually attach userid agent to a lo back device and have only 1 agent configured from panorama to that address.
any thoughts ??
10-09-2018 03:30 PM
Yes, create a DP interface that will fail over the IP between A/P, and attach a management interface profile that allows User-ID to that interface. Configure the single IP in Panorama as a User-ID agent.
10-09-2018 03:30 PM
Yes, create a DP interface that will fail over the IP between A/P, and attach a management interface profile that allows User-ID to that interface. Configure the single IP in Panorama as a User-ID agent.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
