About amy.hazelwood

So I changed around the configuration to what I thought it should be vs. what the contractor put in and I was able to get the HA1 interface up but the HA1 backup is down.  1 - He set Management as the HA1 Control Link and I set it to the HA1 ethernet interface IP. 2 - He set the Peer HA1 IP as the Peer's Management IP and I set it to the Peer's HA1 ethernet interface. 3 - He set the Backup Peer HA1 IP as the Peer's HA1 ethernet interface IP and I set it to the Peer's HA2 ethernet interface, which showed down after I changed it. 3 - He set the Control Link HA1 Backup as the HA1 ethernet interface IP and I set it to None. 4 - We both set the HA2 Datalink to the  HA2 ethernet interface IP, which has always shown up. 5 - We both set the HA2 Datalink Backup to None.   I know the PA-850s HA setup must be configured differently than the PA-200s HA setup, but I cannot find a config guide specific to the PA-850s. ... View more

Security Policy:   Name:  DaVinci-Ping-Subnet Rule Type:  Universal Tags:  DaVinci Group Rules by Tags:  None   Source Zone:  Any Source Address:  Any   Destination Zone:  Modality Destination IP:  10.10.10.1   Application:  icmp   Service:  application-default URL Category:  Any   Action:  Allow Log Setting:  Log at Session End Log Forwarding:  M-L-Log-Forwarder ... View more

Backup Peer HA1 IP address is .30 Control Link (HA1Backup) is .29 ... View more

From what I can see (online not onsite) is one HA is ethernet1/7 and the other HA is ethernet1/8, both up. ... View more

Another question:   Under Network-Interfaces the link state shows up, but under the Dashboard the HA1 shows down.  They have the same IP - I feel like there is something I am not understanding about his config... ... View more

Ok, I work remotely and I've having trouble getting someone to look at the cabling for me.  I'll keep you posted.  Thank you. ... View more

Thank you for the clarification.  Here is what I have:   Name: ha1, ID: 5 Link status: Runtime link speed/duplex/state: unknown/unknown/unknown Configured link speed/duplex/state: auto/auto/auto ... View more

How do I tell from the CLI output from "show interface ha1" if it is up? ... View more

Ok yes, my error, I do see the HA1 interface. ... View more

I am a Super User and I am still getting this error when trying to modify security policies.  Any suggestions? ... View more

What are the 5 pairs that are connected? HA1-a, HA1-b What model firewalls are these?  PA-850 In the CLI, does that HA interface show up?  show interface command will not work in the CLI Are the HA1 addresses on the same subnet?  Yes ... View more

To my knowledge it was never up.  The contractor who set it up left abruptly and we never had time to circle back and discuss.  He did say that he needed to change something but didn't say what and from what I can tell the HA config was done correctly.  The five pairs are directly connected, however two of the pairs are on different subnets.  I'm not sure why he set them up differently.  The Peer HA1 IP address on the active Palo is the IP of the passive Palo, and the Peer HA1 IP address of the passive Palo is the IP of the active Palo - is that what you are referring to? ... View more