- Network > Interfaces > Ethernet
Each high availability (HA) interface has a specific function: one interface is for configuration synchronization and heartbeats, and the other interface is for state synchronization. If active/active high availability is enabled, the firewall can use a third HA interface to forward packets.
Some Palo Alto Networks firewalls include dedicated physical ports for use in HA deployments (one for the control link and one for the data link). For firewalls that do not include dedicated ports, you must specify the data ports that will be used for HA. For additional information on HA, refer to “Device > Virtual Systems”.
To configure an HA interface, click the name of an Interface (ethernet1/1, for example) that is not configured and specify the following information.
HA Interface Settings
The interface name is predefined and you cannot change it.
Enter an optional description for the interface.
Select the interface speed in Mbps (10, 100, or 1000), or select auto to have the firewall automatically determine the speed.
Select whether the interface transmission mode is full-duplex (full), half-duplex (half), or negotiated automatically (auto).
Select whether the interface status is enabled (up), disabled (down), or determined automatically (auto).
Log Card Interface
Log Card Interface Network > Interfaces > Ethernet If you configure log forwarding on a PA-7000 Series firewall, you must configure one data port as ...
Decrypt Mirror Interface
Decrypt Mirror Interface Network > Interfaces > Ethernet To use the Decryption Port Mirror feature, you must select the Decrypt Mirror interface type. This feature ...
Configure HA Settings
Configure HA Settings To configure HA settings, select Device High Availability and then, for each group of settings, specify the corresponding information described in the ...
Configure Active/Passive HA
Configure Active/Passive HA The following procedure shows how to configure a pair of firewalls in an active/passive deployment as depicted in the following example topology. ...
Tap Interface Network > Interfaces > Ethernet You can use a tap interface to monitor traffic on a port. To configure a tap interface, click ...
PA-7000 Series Layer 2 Interface
PA-7000 Series Layer 2 Interface Network > Interfaces > Ethernet Select Network Interfaces Ethernet to configure a Layer 2 interface. click the name of an ...
Aggregate Ethernet (AE) Interface
Aggregate Ethernet (AE) Interface Network > Interfaces > Ethernet To configure an Aggregate Ethernet (AE) Interface , first configure an Aggregate Ethernet (AE) Interface Group ...
Configure Active/Active HA
Configure Active/Active HA The following procedure describes the basic workflow for configuring your firewalls in an active/active configuration. However, before you begin, Determine Your Active/Active ...
Aggregate Ethernet (AE) Interface Group
Aggregate Ethernet (AE) Interface Group Network > Interfaces > Ethernet An AE interface group uses IEEE 802.1AX link aggregation to combine multiple Ethernet interfaces into ...