Panorama Ethernet interfaces IP settings greyed out

[psycoma1984]

Hello All,

We have 2xM600 appliances in HA pair. We want to separate SSH/HTTPS management and  device management/loggin collector communication on different interfaces, e.g.: 

1. SSH/HTTPS access to Panorama will still be on Management interface as well as Log Collector communication;

2. Device management will move to Ethernet 1/1.

I was able to configure new address/mask/gateway for Ethernet1/1 on Panorama Primary. When I am trying to do so on Secondary, every option there is greyed out except Public IP address.

Is it at all possible to be configured on 2 different IP addresses within HA pair on Ethernet1/1 interface? It looks like it doesn't synchronize these settings between nodes.

Appreciate your response. 

[kiwi]

Hi @psycoma1984 ,

Eth1/1 should be synchronized.

The settings that are not synchronized are those that are unique to each peer, such as the following:

• Panorama HA configuration—Priority setting, peer IP address, path monitoring groups and IP addresses
• Panorama configuration—Management interface IP address, FQDN settings, login banner, NTP server, time zone, geographic location, DNS server, permitted IP addresses for accessing Panorama, SNMP system settings, and dynamic content update schedules
• Scheduled configuration exports
• NFS partition configuration and all disk quota allocation for logging. This applies only to a Panorama virtual appliance in Legacy mode that runs on a VMware ESXi server
• Disk quota allocation for the different types of logs and databases on the Panorama local storage (SSD)

• Password for the Panorama admin administrator

Source: Synchronization Between Panorama HA Peers 

Cheers,

-Kiwi