topic Re: High Availability - Active goes down due to non-functional in General Topics

High Availability - Active goes down due to non-functional

JoHyeonJae — Mon, 27 Jun 2022 02:01:00 GMT

Hello all,

Last Sunday (6/26) at 5:37:27 PM, a failover occurred due to an Ethernet 1/22 interface down on the customer's Active Firewall.

I have looked around the log to analyze the cause, but the CPU was not high and I couldn't find the cause.

The figure below is ha-agent and route log. Do you know why such an error occurs?

<routed.log>

<ha-agent.log>

<routed.log>

The bug below can cause this problem?

PAN-179274 - Fixed an issue on high availability configurations where, after upgrading to PAN-OS 9.1.10, PAN-OS 10.0.6, or PAN-OS 10.1.0, the high availability (HA1) and HA1-Backup link stayed down. This issue occurred when the peer firewall IP address was in a different subnet.

#HA failover

Best Regards,

Re: High Availability - Active goes down due to non-functional

JayGolf — Thu, 30 Jun 2022 04:41:02 GMT

Hi @JoHyeonJae ,

I would look into why eth1/22 went down. Try running the following commands:

- show interface ethernet 1/22 and check for errors

- less mp-log brdagent.log to provide more details regarding port issues

Also, can you clarify the exact issue you are having please? Are you saying after finding out eth1/22 went down failover to the passive did not succeed?

Re: High Availability - Active goes down due to non-functional

JoHyeonJae — Tue, 19 Jul 2022 01:07:10 GMT

@JayGolf
Are you saying after finding out eth1/22 went down failover to the passive did not succeed?
Yes, that is right.

During the search, we did not find any failure (DP, slot, kernel, or OS) from the firewall side. It looks more like a cable issue or local network topology/network connection issue.