Firewall : Palo Alto Network - Configure Active & Passive HA
Configure Active/Passive HA
----------------------------------------------------------------------------------------------------------
The following procedure shows how to configure a pair of firewalls in an active/passive deployment as depicted in the following example topology. To configure an active/passive HA pair, first complete the following workflow on the first firewall and then repeat the steps on the second firewall.
Step 1 - Connect the HA ports to set up a physical connection between the firewalls.
Step 2 - Enable ping on the management port.
Step 3 - If the firewall does not have dedicated HA ports, set up the data ports to function as HA ports.
Step 4 - Set the HA mode and group ID.
Step 5 - Set up the control link connection.
Step 6 - (Optional) Enable encryption for the control link connection.
Step 7 - Set up the backup control link connection.
Step 8 - Set up the data link connection (HA2) and the backup HA2 connection between the firewalls.
Step 9 - Enable heartbeat backup if your control link uses a dedicated HA port or an in-band port.
Step 10 - Set the device priority and enable preemption.
Step 11 - (Optional) Modify the HA Timers .
Step 12 - (Optional), only configured on the passive firewall) Modify the link status of the HA ports on the passive firewall.
Step 13 - Enable HA.
Step 14 - (Optional) Enable LACP and LLDP Pre-Negotiation for Active/Passive HA for faster failover if your network uses LACP or LLDP.
Step 15 - Save your configuration changes.
Step 16 - After you finish configuring both firewalls, verify that the firewalls are paired in active/passive HA.
For Details - https://maddystechworld.blogspot.in/2...