virtual address active-active

[ceapen01]

is virtual address mandatory for active-active HA configurations. I do not wish to use virtual address for A-A HA. My ISP does not give enough IPs

[TomYoung]

Hi @ceapen01 ,

A virtual or floating IP address is not required for route-based redundancy.  See the 3 use cases here -> https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/high-availability/set-up-activeactive-ha/d....

Note step 16 in this doc -> https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/high-availability/set-up-activeactive-ha/c....  Two of the use cases require a floating VIP.

Thanks,

Tom