Sunday, February 18, 2018

Palo Alto HA Failover

Failover testing

To failover a device from the functional role to suspended role you’ll need to perform the following steps:
1. From within the GUI select Device > High-Availability.
2. Towards the top right of the user interface you’ll notice the following; If the FW is currently the master ‘Suspend’ will be displayed, if the FW is currently the slave ‘functional’ will be displayed.
3. To force the current master into slave mode you’ll need to click suspend or use the following command:
>request high-availability state suspend
4. This will automatically put the slave device into functional mode. You may miss 1 ping during this transition.

CLI Reference

Request Commands
Force configuration and session synchronisation to peer device
>request high-availability sync-to-remote
Fail to peer and suspend current device
>request high-availability state suspend
Re-enable HA on suspended system
>request high-availability state functional
Show Commands
Shows the high-availability information on current device
>show high-availability all
Shows the control link statistics
>show high-availability control-link
Shows the high-availability state information
>show high-availability state
Shows the synchronisation state to the peer device
>show high-availability state-synchronisation

No comments: