What is a Master Device in Device Groups?

[erantanen]

What role does a Master Device in a Device Group play?

Is there special communication with the Master Device, as a dependency?

If the Master Device goes down, is there a re-negotiation?

Is this Master Device affected with the standup of HA?

[akhan · Accepted solution]

Hi,

The device selected as the Master Device is used to gather user information.  The gathered user and group mapping information is used for shared policy configiration.

Selecting a Master Device is not mandatory for Panorama operation.  Again, if you would like to get the user information available on a PAN device on to Panorama for policy creation, then this option needs to be selected.   This has nothing to do with HA.

Thanks,

Ahsan

[Sec101]

What happens in the event of a failover on an HA pair- do you have to manually go in and set the master device again?

[kiwi]

In case the master goes down then information will not be refreshed until it's back up again or until a new master is configured.

Note that when you change the master or set it to none, Panorama loses all the user and group information received from that firewall.

Cheers,

-Kiwi.