https://live.paloaltonetworks.com/t5/next-generation-firewall/testing-interfaces-on-passive-node/m-p/653038#M5080 <P>Hello,</P> <P>I would start by looking at the logs, however the passive device takes the IP's of the active one during failover. What I have seen at times is ARP/MAC taking its time to update so a switch might be sending traffic to the wrong switch interface (layer 2). How long did you wait after fail over to test?</P> <P>Regards,</P> Mon, 25 Nov 2024 20:15:36 GMT OtakarKlier 2024-11-25T20:15:36Z https://live.paloaltonetworks.com/t5/next-generation-firewall/testing-interfaces-on-passive-node/m-p/651254#M5072 <P>Dear Community,</P> <P>I have a strange problem related to my PAN1410. My FW are build to HA Active-Passive. Everythink works until failover occcure.. after that I lost connections to GlobalProtect.</P> <P>It seems that I have problem with WAN interface, because when I return to Primary node, connectivity goes back.</P> <P>So if I have connectivity, how can I chceck interface WAN on Passive node ? How can I troubleshoot? How can I force traffic from passive node to ISP ?</P> <P>&nbsp;</P> Sun, 24 Nov 2024 22:27:21 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/testing-interfaces-on-passive-node/m-p/651254#M5072 U.UBB132402 2024-11-24T22:27:21Z https://live.paloaltonetworks.com/t5/next-generation-firewall/testing-interfaces-on-passive-node/m-p/653038#M5080 <P>Hello,</P> <P>I would start by looking at the logs, however the passive device takes the IP's of the active one during failover. What I have seen at times is ARP/MAC taking its time to update so a switch might be sending traffic to the wrong switch interface (layer 2). How long did you wait after fail over to test?</P> <P>Regards,</P> Mon, 25 Nov 2024 20:15:36 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/testing-interfaces-on-passive-node/m-p/653038#M5080 OtakarKlier 2024-11-25T20:15:36Z