Changing High Availability (HA) Heartbeat Interval
Resolution
Overview
Depending on the network design, it may be necessary to change the default heartbeat timer.
Details
A "heartbeat-interval" CLI command was added to the election settings for HA, this interval has a 1000ms minimum for all Palo Alto Networks platforms and is an ICMP ping to the other device through the HA control link.The peer kernel responds directly to the ICMP ping and is not subjected to the possibility of scarce resources slowing the hello protocol.
The default value of the heartbeat interval is 1000ms. However, due to different reasons it is possible to change this value.
PAN-OS 5.0
> configure
# set deviceconfig high-availability group <1 - 254> election-option heartbeat-interval <1000 – 60000>
# commit
PAN-OS 6.0, 6.1 and 7.0
> configure
# set deviceconfig high-availability group 3 election-option timers advanced heartbeat-interval <1000 – 60000>
# commit
See Also
High Availability Failover Optimization
What are the HA heartbeat and hello messages?
owner: mdjeric