Using AUX port as management port

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Using AUX port as management port

L3 Networker

Hello everybody,

 

  I'm configuring a pair of PA5250 in active/standby high availability mode. Since we have no RJ-45 ports on our switches, I would like to use one of the AUX ports as the management port in place of the default MGT RJ-45 port. We are using 10 Gbps SFP+ transceiver (long range, single mode fiber), and the AUX-1 configured as the HA1 port is working fine. The AUX-2 port, not configured as a HA port, has its own IP address, netmask and gateway but does not come up. The "show interface aux-2" command shows only the configured gateway, while for the IP address and netmask it shows "unknown". This happens on both firewalls in the HA pair.

 

Am I missing something to configure the AUX-2 as a management interface? What about the heartbeat backup when the RJ-45 MGT port is not plugged in?

 

The installed PAN-OS is 10.1.3, I will upgrade to 10.1.10-h1 tomorrow to see if this solve the issue.

 

Thank you in advance.

Linus does not push the flush toilet button. He simply says: make clean!
3 REPLIES 3

Cyber Elite
Cyber Elite

Hi @grenzi ,

 

I am curious.  I have a customer with a PA-5220 w/ PAN-OS 9.1, and the aux interfaces do not show up under Network > Interfaces.  They show up under Device > Setup > Interface.  Do you see them under both or just one?

 

Thanks,

 

Tom

Help the community: Like helpful comments and mark solutions.

Hi, this is normal because AUX-1 and AUX-2 belong to the management plane, so they are not listed in the dataplane interface tab.

 

Anyway it seems I solved my issue; the problem was at the physical layer (inverted fiber cables), but since we found RJ45 SFPs to attach the dedicated MGT interfaces to the switch, the AUX-2 port has been reconfigured as the HA1-backup interface.

.

Linus does not push the flush toilet button. He simply says: make clean!

L3 Networker

@grenzi wrote:

What about the heartbeat backup when the RJ-45 MGT port is not plugged in?


 

It seems like you could still have the heartbeat talking between the two firewalls on the MGMT port if you directly cabled them to each other.  What is to say that you NEED to have a switch between them?  Possible roadblock when it comes to default gateway settings though...you would have to configure each interface with no default gateway, a bogus default gateway, or one of the two firewalls as the default gateway I suppose.

  • 1314 Views
  • 3 replies
  • 0 Likes
  • 38 Subscriptions
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!