Explanation/Reference:
To set up high availability on your Palo Alto Networks firewalls, you need a pair of firewalls that meet the following requirements:
The same set of licenses -Licenses are unique to each firewall and cannot be shared between the

firewalls. Therefore, you must license both firewalls identically. If both firewalls do not have an identical set of licenses, they cannot synchronize configuration information and maintain parity for a seamless failover.
The same type of interfaces -Dedicated HA links, or a combination of the management port and in-

band ports that are set to interface type HA.
Determine the IP address for the HA1 (control) connection between the HA peers. The HA1 IP address

for both peers must be on the same subnet if they are directly connected or are connected to the same switch.
Etc.
References: https://www.paloaltonetworks.com/documentation/70/pan-os/pan-os/high-availability/ prerequisites-for-active-passive-ha#_74574
Recent Comments (The most recent comments are at the top.)
Correct Answer is BD
You cannot have same IP address for both firewalls on H1. The Ip address only have to be on same subnet.