In an HA pair running Active/Passive mode, over which interface do the dataplanes communicate?
In an HA pair running Active/Passive mode, over which interface do the dataplanes communicate?
In an HA pair running Active/Passive mode, the dataplanes communicate over the HA2 interface. The HA2 interface is specifically designated for the synchronization of data and state information between the two firewalls. This ensures that the passive firewall is up-to-date with the active firewall, allowing it to take over seamlessly in the event of a failure.
C is correct. The firewalls in an HA pair use HA links to synchronize data and maintain state information. Some models of the firewall have dedicated HA ports—Control link (HA1) and Data link (HA2), while others require you to use the in-band ports as HA links. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/high-availability/ha-concepts/ha-links-and-backup-links
From: https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-web-interface-help/network/network-interfaces/ha-interface Each high availability (HA) interface has a specific function: one interface is for configuration synchronization and heartbeats, and the other interface is for state synchronization. That means that HA2 is the correct answer.
From Palo Alto 48. Which dedicated HA port is used for which plane in HA pairs? a. HA1 for the data plane, and HA2 for the management plane (V) b. HA1 for the management plane, and HA2 for the data plane c. MGT for the management plane and HA2 as a backup d. HA1 for the management plane and HA2 for the data plane in the PA-7000 Series
the study guide is wrong...
Answer C is correct, see also: https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-web-interface-help/device/device-high-availability/ha-communications