Palo_Alto_Networks
PCNSC · Question #49
An administrator has been asked to configure active/active HA for a pair of Palo Alto Networks NGFWs. The firewalls use layer 3 interface to send traffic to a single gateway IP for the pair. Which…
The correct answer is B. The two firewalls will share a single floating IP and will use gratuitous ARP to share the floating. https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/high-availability/ha- concepts/floating-ip-address-and-virtual-mac-address
VPN and High Availability
Question
An administrator has been asked to configure active/active HA for a pair of Palo Alto Networks NGFWs. The firewalls use layer 3 interface to send traffic to a single gateway IP for the pair. Which configuration will enable this HA scenario?
Options
- AThe firewall do not use floating IPs in active/active HA.
- BThe two firewalls will share a single floating IP and will use gratuitous ARP to share the floating
- CThe firewalls will share the same interface IP address, and device 1 will use the floating IP if
- DEach firewall will have a separate floating IP. and priority will determine which firewall has the
How the community answered
(38 responses)- A3% (1)
- B84% (32)
- C3% (1)
- D11% (4)
Explanation
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/high-availability/ha- concepts/floating-ip-address-and-virtual-mac-address
Topics
#active/active HA#floating IP#gratuitous ARP#high availability
Community Discussion
No community discussion yet for this question.