©
Palo
Alto
Networks,
Inc.
Panorama
6.1
Administrator’s
Guide
•
185
Panorama
High
Availability
Manage
a
Panorama
HA
Pair
Step
3
Set
the
HA
priority.
1.
In
Panorama > High Availability
,
edit
the
Election Settings
section.
2.
Define
the
Device Priority
as
Primary
or
Secondary
.
Make
sure
to
set
one
peer
as
primary
and
the
other
as
secondary.
If
both
peers
have
the
same
priority
setting,
the
peer
with
the
higher
serial
number
will
be
placed
in
a
suspended
state.
3.
Define
the
Preemptive
behavior.
By
default
preemption
is
enabled.
The
preemption
selection—
enabled
or
disabled—
must
be
the
same
on
both
peers.
If
you
are
using
an
NFS
for
logging
and
you
have
disabled
preemption,
to
resume
logging
to
the
NFS
see
Step
4
To
configure
path
monitoring,
define
one
or
more
path
groups.
The
path
group
lists
the
destination
IP
addresses
(nodes)
that
Panorama
must
ping
to
verify
network
connectivity.
Perform
the
following
steps
for
each
path
group
that
includes
the
nodes
that
you
want
to
monitor.
1.
Select
Panorama > High Availability
and,
in
the
Path
Group
section,
click
Add
.
2.
Enter
a
Name
for
the
path
group.
3.
Select
a
Failure Condition
for
this
group:
•
any
triggers
a
link
monitoring
failure
if
any
one
of
the
IP
addresses
becomes
unreachable.
•
all
triggers
a
link
monitoring
failure
only
when
none
of
the
IP
addresses
are
reachable.
4.
For
each
destination
IP
address
you
want
to
monitor,
click
Add
and
type
the
IP
address.
5.
Click
OK
.
The
Path
Group
section
displays
the
new
group
.
Step
5
(Optional)
Select
the
failure
condition
for
path
monitoring
on
Panorama.
Select
Panorama > High Availability
,
edit
the
Path
Monitoring
section,
and
select
a
Failure Condition
:
•
all
triggers
a
failover
only
when
all
monitored
path
groups
fail.
•
any
triggers
a
failover
when
any
monitored
path
group
fails.
Step
6
Save
your
configuration
changes.
Click
Commit
,
select
Panorama
in
the
Commit Type
option,
and
click
OK
.
Step
7
Configure
the
other
Panorama
peer.
Repeat
through
on
the
other
peer
in
the
HA
pair.
Step
8
Verify
that
the
Panorama
servers
are
paired
in
HA.
After
you
configure
both
Panorama
servers
for
HA:
1.
Access
the
Dashboard
on
each
Panorama,
and
view
the
High
Availability
widget.
2.
Verify
the
Panorama
servers
are
paired
and
synchronized:
•
Active
Panorama—The
state
of
the
Local
peer
must
be
active
and
the
Running Config
must
be
synchronized
.
•
Passive
Panorama—The
state
of
the
Local
peer
must
be
passive
and
the
Running Config
must
be
synchronized.
Set
Up
HA
on
Panorama
(Continued)
