Exam PCNSE topic 1 question 473 discussion

Actual exam question from Palo Alto Networks's PCNSE

Question #: 473
Topic #: 1

An administrator has two pairs of firewalls within the same subnet. Both pairs of firewalls have been configured to use High Availability mode with Active/Passive. The ARP tables for upstream routes display the same MAC address being shared for some of these firewalls.

What can be configured on one pair of firewalls to modify the MAC addresses so they are no longer in conflict?

A. Change the interface type on the interfaces that have conflicting MAC addresses from L3 to VLAN.
B. On one pair of firewalls, run the CLI command: set network interface vlan arp.
C. Change the Group IDs in the High Availability settings to be different from the other firewall pair on the same subnet.
D. Configure a floating IP between the firewall pairs.

Show Suggested Answer

Suggested Answer: C 🗳️

by evdw at Jan. 3, 2023, 9:52 p.m.

Comments

Submit Cancel

djedeen

Highly Voted 2 years ago

Selected Answer: C

Per Evdw's link: The Group ID is part of the MAC address in a HA pair. Each pair of devices in a multi-cluster environment must have a unique Group ID in order to prevent duplicate MAC entries in upstream ARP tables. Changing the Group ID in one of these clusters should resolve the problem.

upvoted 6 times

...