topic Re: Firewall idmgr High Availability State Showing difference in General Topics

Firewall idmgr High Availability State Showing difference

JiaXiang — Tue, 02 Aug 2022 08:42:13 GMT

I have configure a RMA replacement HA device by following below guide

How to Configure a High Availability Replacement Device - Knowledge Base - Palo Alto Networks

I follow until step 10 need to use below command to check the state

debug device-server dump idmgr high-availability state

Result showing difference.

I also tried to reboot and commit force but also the same result how to make it same and what is the impact if this is different?

Re: Firewall idmgr High Availability State Showing difference

BPry — Wed, 03 Aug 2022 02:11:42 GMT

@JiaXiang,

Step 11 references why you can have a difference when you restore from the old backup when using Panorama. You may need to manually configure the passive unit to actually get things back inline.

Re: Firewall idmgr High Availability State Showing difference

JiaXiang — Wed, 03 Aug 2022 02:29:21 GMT

Thanks for your reply, the firewall is not manage by Panorama and I have use the config audit to check both firewall except some IP of interfaces is different other config is identical and running config also show synced. I can`t see any configuration I can manually configure anymore.

Re: Firewall idmgr High Availability State Showing difference

JiaXiang — Wed, 10 Aug 2022 09:10:08 GMT

My colleague check on multiples firewall that is deploy for longtime and no issue it also showing result as difference.