How to Configure Basic Layer 3 HA for Palo Alto Network Devices - External Cluster

Steps:

Basic L3 and HA configuration steps for Palo Alto Networks devices – External cluster.

1. Configure multiple interfaces for L3 mode; create a zone for each L3 interface.
2. Create a virtual router then add the L3 interfaces from step 1.
3. Add NAT rules to translate either incoming or outgoing traffic.
4. Add security policy to allow traffic and apply predefined profiles.
5. Verify outbound and inbound traffic.
6. Configure the HA parameters.
7. Plug in the HA1 and HA2 connections.
8. Bring up the second device (do not plug in in-band Ethernet interfaces.)
9. Configure the HA parameters.
10. Verify the HA status on the first device (prompt shows active.).
11. Verify the HA status on the second device (prompt shows passive.).
12. Verify that the HA configuration has been synced from active device to the passive device.
13. Connect the in-band ports on the second device.Test HA fail-over.

owner: panagent