In fact, it would be very useful to show that the interface gateway MAC addresses also change when failover occurs. and because of that there are always 1-2 packet loss while you test. and i wish you also mentioned about link and path monitoring. thank you for your effort very useful and helpful.
Hi Sir, when you made switch down, how can both firewall have same ethernet IP? means after making switch down there must be no connection between them.
Sir.. Nice explanation ..Please suggest on below given scenario ... Two ISP Links and two Paloalto firewall in HA Mode .. How should i terminate the WAN links..Can i terminate it directly on Firewall or I should use a Router for terminating WAN links
Hi Bikash , if the link between Router C and Active firewall is down , how the traffic from network B will reach to Router C ? there should be some FHRP implemented on LAN side . so that traffic will be forwarded from Router D to Standby Firewall path
What is your laptop configuration to perform these labs on eveng ? I need to buy one laptop for performing these labs anu suggestions what requirements should I go for ?
I am not using laptop for lab. I have desktop which has i7 processor and 64gb of ram. Laptop will cost more for this kind of configuration, i suggest for desktop in case if it not possible go for google cloud lab with any laptop.
are you running this simulation in EVE-NG? If so community or professional? If not what? I'm trying to setup an HA environment at the moment in my home lab.
hi Bikash -thanks for these videos. A quick question - does link monitoring help in virtual deployment or is it purely for the physical link failure detection?
Hi Sir .. Thank you for valuble videos ,, Can you please explan if we have one wan or two wan device with diffrent service provider or same services provider how failver will happen .. what are the dvices has been connected between Palo fw to Wan device Do we need take two /30 subnet ? to connect two wan Devices? if there is a L2 switch in between FW to wan Device how the configuration ? just we need enable trunk on L2 or we need to create L2 vlan as well ? please plan the Video and explan. please share the more trouble shooting commands in HA
1) what will happen if devices are in hung state 2) If standyby device rebooted ( note : all looks gd like cables, interface crc errors and all) but still interfaces are not coming up in secondary device what could be the reason ?
1. What will happen HA1, Ha1 backup link down , but Ha2, Ha2 backup link up.. 2. What will happen HA2, Ha2 backup link down , but Ha1, Ha1 backup link up.. 3.What will happen HA1, Ha1 backup link , Ha3 link down , but Ha2, Ha2 backup link up.. 4.What will happen HA2, Ha2 backup , HA3 link down , but Ha1, Ha1 backup link up.. 5. What will happen HA3 link down , but Ha2, Ha1 links are up..
Thank you very much for explained the concepts clearly with live example... Kudos 👌
Thankyou so much for making such a excellent series of firewall training.
Thank you for detail explanation
In fact, it would be very useful to show that the interface gateway MAC addresses also change when failover occurs. and because of that there are always 1-2 packet loss while you test. and i wish you also mentioned about link and path monitoring. thank you for your effort very useful and helpful.
Apart from mgmt interface do we have any other option for creating the back up HA link?
Very nice description sir.
Thank you sir for such a excellent explaination,
thanks for the excellent video...!!
Nicely explain as usual... thank you Bikash.... please share some new videos on troubleshooting..
good explication , thanks
Thank you very much. That is well explained.
Very well explained...Thank You very much.
super clear thanks a lot
Hi Sir,
when you made switch down, how can both firewall have same ethernet IP?
means after making switch down there must be no connection between them.
Sir.. Nice explanation ..Please suggest on below given scenario ... Two ISP Links and two Paloalto firewall in HA Mode .. How should i terminate the WAN links..Can i terminate it directly on Firewall or I should use a Router for terminating WAN links
It is good to terminate on router for WAN link
Excelent, thank you very much
Thank you!!!!!! Please make video for debug also and counters!!!!
amazing...
Hi Bikash , if the link between Router C and Active firewall is down , how the traffic from network B will reach to Router C ? there should be some FHRP implemented on LAN side . so that traffic will be forwarded from Router D to Standby Firewall path
Nice
What is your laptop configuration to perform these labs on eveng ? I need to buy one laptop for performing these labs anu suggestions what requirements should I go for ?
I am not using laptop for lab. I have desktop which has i7 processor and 64gb of ram. Laptop will cost more for this kind of configuration, i suggest for desktop in case if it not possible go for google cloud lab with any laptop.
Thank you Bikash... please upload panorama videos as well.
We need license for that so i am raising fund on patreon.
are you running this simulation in EVE-NG? If so community or professional? If not what? I'm trying to setup an HA environment at the moment in my home lab.
Thanks for comment.
Hi Ryan,
Yeah it is on EVE-NG. Please send me email on bikashshaw261@gmail.com. we will can a session.
very nice and informative :-)
hi Bikash -thanks for these videos. A quick question - does link monitoring help in virtual deployment or is it purely for the physical link failure detection?
Bro good channel for Learning, is this course completed or still ongoing,
How long it's gonna be to complete course
Hi Naveen,
This is still ongoing.
I'm doing CCNP , After that can I start this or let me start now
Hi Sir .. Thank you for valuble videos ,,
Can you please explan if we have one wan or two wan device with diffrent service provider or same services provider how failver will happen ..
what are the dvices has been connected between Palo fw to Wan device
Do we need take two /30 subnet ? to connect two wan Devices?
if there is a L2 switch in between FW to wan Device how the configuration ? just we need enable trunk on L2 or we need to create L2 vlan as well ?
please plan the Video and explan.
please share the more trouble shooting commands in HA
Thanks for your suggestions.
I am working on troubleshooting scenarios, at the end of the series, i will come up with troubleshooting videos.
1) what will happen if devices are in hung state
2) If standyby device rebooted ( note : all looks gd like cables, interface crc errors and all) but still interfaces are not coming up in secondary device what could be the reason ?
Hello sir ,Please provide Palo Alto notes for interview purpose.
1. What will happen HA1, Ha1 backup link down , but Ha2, Ha2 backup link up..
2. What will happen HA2, Ha2 backup link down , but Ha1, Ha1 backup link up..
3.What will happen HA1, Ha1 backup link , Ha3 link down , but Ha2, Ha2 backup link up..
4.What will happen HA2, Ha2 backup , HA3 link down , but Ha1, Ha1 backup link up..
5. What will happen HA3 link down , but Ha2, Ha1 links are up..