Focus

Prisma SD-WAN Administrator’s Guide

Configure a High Availability (HA) Interface for HA Deployment

Table of Contents

Configure a High Availability (HA) Interface for HA Deployment

Learn how to create an HA interface for HA deployments.

Generation One ION devices (ION 1000, ION 2000, ION 3000, and ION 9000) use the control port for the exchange of HA heart beat and manage the controller traffic between the active and the standby device. The NextGen ION devices (ION 1200-S, ION 3200, ION 5200, ION 9200) do not need a dedicated controller port with the introduction of

used-for-HA

as a port type.

The

used-for-HA

interface (referred to as the

used-for-control

interface prior to Release 6.3.1) exchanges heartbeat between the two ION devices and also connects the standby device to the controller through the active ION device. You can use this interface to send management traffic like App Probe, NTP, SNMP, RADIUS, and IPFIX.

Starting with Release 6.3.1, the support for High Availability (HA) has been enhanced to include compatibility with various interface types.

If you have configured the

used-for-HA

interface and you want to downgrade to a version that does not support the

used-for-HA

interface, contact Palo Alto Customer Support.

Used-for-HA

is supported on all ION platforms. Directly establishing the High Availability (HA) connection between devices is recommended only in cases where there are no southbound LAN switches present and exclusively only with 1200-S and 3200-L2 models with redundant ports.

Used-for-HA

is supported on the following interfaces in HA topology:

Configure a Switch Virtual Interface (SVI) for HA Connectivity

Configure a Sub-interface for HA Connectivity

Configure a Main Interface for HA Connectivity

You will need ION device software version 6.3.1 or higher to configure a main interface as a

used-for-HA

interface.