Alto Active Manual do Utilizador

Palo Alto Networks®PAN-OS® Administrator’s GuideVersion 6.0Copyright © 2007-2014 Palo Alto NetworksHigh Availability

132 High AvailabilityHA Concepts High AvailabilityAdditional master hold up timeThis time interval is applied to the same event as Monitor Fail Hold

High Availability 133High Availability Set Up Active/Passive HA Set Up Active/Passive HA Prerequisites for Active/Passive HA Configuration Guidelin

134 High AvailabilitySet Up Active/Passive HA High AvailabilityPrerequisites for Active/Passive HATo set up high availability on your Palo Alto Netw

High Availability 135High Availability Set Up Active/Passive HA Configuration Guidelines for Active/Passive HATo set up an active (PeerA) passive (Pe

136 High AvailabilitySet Up Active/Passive HA High AvailabilityIndependent Configuration SettingsPeerA PeerBControl Link IP address of the HA1 link

High Availability 137High Availability Set Up Active/Passive HA Configure Active/Passive HAThe following procedure shows how to configure a pair of f

138 High AvailabilitySet Up Active/Passive HA High AvailabilityStep 4 Set up the control link connection.This example shows an in-band port that is

High Availability 139High Availability Set Up Active/Passive HA Step 7 Set up the data link connection (HA2) and the backup HA2 connection between th

140 High AvailabilitySet Up Active/Passive HA High AvailabilityStep 9 Set the device priority and enable preemption.This setting is only required if

High Availability 141High Availability Set Up Active/Passive HA Step 12 Enable HA. 1. Select Device > High Availability > General, edit the Set

Contact InformationCorporate Headquarters:Palo Alto Networks4401 Great America ParkwaySanta Clara, CA 95054http://www.paloaltonetworks.com/contact/con

142 High AvailabilitySet Up Active/Passive HA High AvailabilityOn the passive device: The state of the local device should display passive and the c

High Availability 143High Availability Set Up Active/Passive HA Define HA Failover ConditionsConfigure the Failover Triggers Step 1 To configure link

144 High AvailabilitySet Up Active/Passive HA High AvailabilityVerify Failover To test that your HA configuration works properly trigger a manual fa

High Availability 145High Availability HA Resources HA ResourcesFor more information on HA, refer to the following sources: Active/Active HA High A

146 High AvailabilityHA Resources High AvailabilityCopyright © 2007-2014 Palo Alto Networks

High Availability 125High AvailabilityHigh availability (HA) is a configuration in which two firewalls are placed in a group and their configuration i

126 High AvailabilityHA Overview High AvailabilityHA OverviewOn Palo Alto Networks firewalls, you can set up two devices as an HA pair. HA allows yo

High Availability 127High Availability HA Concepts HA ConceptsThe following topics provide conceptual information about how HA works on a Palo Alto N

128 High AvailabilityHA Concepts High Availability Control Link: The HA1 link is used to exchange hellos, heartbeats, and HA state information, and

High Availability 129High Availability HA Concepts Device Priority and PreemptionThe devices in an HA pair can be assigned a device priority value to

130 High AvailabilityHA Concepts High Availabilitydevice. The device with the lower numerical value, and therefore higher priority, is designated as

High Availability 131High Availability HA Concepts HA TimersHigh Availability (HA) timers are used to detect a firewall failure and trigger a failove