: Add ION Devices to HA Groups
Focus
Focus

Add ION Devices to HA Groups

Table of Contents

Add ION Devices to HA Groups

Let us learn to add ION devices to HA Groups.
Where Can I Use This?What Do I Need?
  • Prisma SD-WAN
  • Active Prisma SD-WAN license
After creating an HA Group, you can add ION devices to the HA Group. An HA Group can include a maximum of two ION devices in this release.
  1. Select an HA Group.
    You can navigate in any of the following ways to view an HA Group.
    • Select WorkflowSites. From the ellipsis menu select HA Groups.
    • Select Workflow DevicesClaimed Devices. Select a device and from the ellipsis menu, select Configure the Device.
  2. On the HA Groups screen, for an HA group click add under the Devices column.
  3. On the Add Spoke HA Configuration screen:
    1. Select an HA Group from the Spoke Cluster drop-down list.
      The Enabled check box is selected by default.
    2. Enter a Priority between 1 and 254.
      If preempt is enabled, the device with the higher priority will be the active device. If preempt is not enabled, then the device first added to the HA group will be active. It is recommended to have a minimum difference of at least 40 between the priorities of an active ION device and a backup ION device.
    3. For Track Availability, select an interface for tracking from Name.
      • Track Availability for interfaces tracks the physical status of the interface.
      • When using a 1200-S and you're using an SVI for the Used for HA interface, the following configuration is mandatory:
        • Configure the interface carrying the HA control VLAN as a trunk port (even if carrying a single VLAN).
        • Enable Interface tracking for the trunk switch ports to ensure correct failover behavior. Ensure that the tracking decrement value is the same as the existing device HA priority in order for the ION to decrement to zero under this failure condition.
        • (Optional)Track availability for WAN tracks Layer 3 reachability for WAN circuits. If there is a transport issue causing middle mile failure, using track availability for WANs, an HA switchover can be induced by lowering the priority of the active device. This should only be enabled when using unique IP addresses on each WAN interface, it is not supported in Bypass Configurations.
      • A maximum of four interfaces can be tracked for availability.
      • Only WAN facing interfaces with an attached circuit label are listed for tracking Layer 3 reachability on the WAN.
    4. Enter a value in the Reduce Priority field to reduce the device priority when the selected interface or Layer 3 reachability over the WAN circuits is down.
    5. Click Save.
      The device is added to the HA Group. An up arrow indicates that the device is enabled.
      • The HA switchover from active to backup device occurs when the track availability fails. As soon as the interface is available again or when the Layer 3 reachability on the WAN is restored, an HA switchover is induced restoring the devices to their original state.
      • We do not recommend to enable tracking of Layer 3 availability for:
        • A private WAN interface that has BGP peering configured.
        • Devices sharing a single circuit.