topic Re: HA A/P on AZURE IP floating in VM-Series in the Public Cloud

HA A/P on AZURE IP floating

IMADHA — Thu, 07 Jul 2022 08:37:10 GMT

Hello,

i configured HA actif / passif on azure when the failovor occurs the floating IP still on the First Firewall, she not move for the seconf that he becomes Actif.

- all permiissions are gived

-configuration is a same to the Knowledge base

-test plugin is passed

in logs i see that and i dont know what that's mean :

2022-06-29 17:41:54.307 +0200 vm_ha_state_trans INFO: : Sending detach command for NIC : None
2022-06-29 17:41:54.337 +0200 vm_ha_state_trans INFO: : Instance running in region '-----europe'
2022-06-29 17:41:54.338 +0200 vm_ha_state_trans INFO: : URL for put request: https://management.azure.com/None?api-version=2019-11-01
2022-06-29 17:41:54.455 +0200 vm_ha_state_trans INFO: : Put Request Failed: 404

thank you all fou your help

Re: HA A/P on AZURE IP floating

ThomasTang — Tue, 26 Jul 2022 04:50:48 GMT

You can double check do u have below permission first on the Azure Service Principal

Microsoft.Authorization/*/read

Microsoft.Compute/virtualMachines/read

Microsoft.Network/networkInterfaces/*

Microsoft.Network/networkSecurityGroups/*

Microsoft.Network/virtualNetworks/join/action

Microsoft.Network/virtualNetworks/subnets/join/action

Microsoft.Network/publicIPAddresses/join/action

Microsoft.Network/publicIPAddresses/read

Microsoft.Network/publicIPAddresses/write

Microsoft.Network/routeTables/*

Re: HA A/P on AZURE IP floating

IMADHA — Tue, 26 Jul 2022 09:32:06 GMT

Hello Thomas,

thanks for your reply

i confirm that, i remark that he dont send detach command in the logs and i dont know why?

2022-06-29 17:41:54.307 +0200 vm_ha_state_trans INFO: : Sending detach command for NIC : None

and he get error 404 when he try to put the URL

2022-06-29 17:41:54.338 +0200 vm_ha_state_trans INFO: : URL for put request: https://management.azure.com/None?api-version=2019-11-01

2022-06-29 17:41:54.455 +0200 vm_ha_state_trans INFO: : Put Request Failed: 404

and i dont know where he brings this link, if you have an idea, may be its by default used by the version of the plugin

thank you

Re: HA A/P on AZURE IP floating

SathyaK — Thu, 06 Apr 2023 15:13:11 GMT

We are seeing the same issue and there is no clue on why would the Firewall make call to NIC: None. Did you happen to find a solution for this issue?

Re: HA A/P on AZURE IP floating

SathyaK — Thu, 06 Apr 2023 16:08:00 GMT

Floating IP attach/detachment issues in Azure HA environment af... - Knowledge Base - Palo Alto Networks .. this helped, it was the sequence. Had to turn off one firewall, then rebooted the one that has Secondary-IP Created to solve the error.