Hi all,
Do we need to use HSCI for HA2 on an Active/Passive cluster? Or can we use AUX or an Ethernet port and if so is this routable?
The firewalls are being setup as an Active/Passive pair across 2 sites.
Thanks
top of page
All things Palo Alto Networks
Forum: Forum
bottom of page
Can you also use HA1 and HA2 over fibre too?
Hi Adam! You don't need to use the HSCI for HA2, you can just as easily use a dataplane interface (set it to "type HA" first, and it will become an available option) The AUX interfaces, in respect to high availability, can only be used for HA1 connections HA2 is routable, you only need to provide an IP, subnet and default route, and set HA2 to IP or UDP mode (as opposed to Ethernet mode). HA1 takes care of notifying the remote peer about the HA2 IP address