Avatar of amigan_99
amigan_99
Flag for United States of America asked on

Should interfaces on PAN standby unit be in a down state normally?

When using Active-Standby HA on an Palo Alto networks firewall, is it expected that the traffic interfaces (inside, outside) on the standby unit should be in a configured and down state until it becomes the active node? In contrast the Cisco ASA secondary unit has their interfaces up and have an IP address. 

* Palo Alto NetworksHardware Firewalls

Avatar of undefined
Last Comment
kevinhsieh

8/22/2022 - Mon
kevinhsieh

Are you running multiple switches? If you want fast failover, the interfaces on the standby switch need to be up. My failvoer takes places in usually less than a second for a planned failover.
amigan_99

ASKER
It's Nexus 9K pair configured in a VPC.
ASKER CERTIFIED SOLUTION
kevinhsieh

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes