topic Re: Outside WAN port staying red on backup PA-850 when failing over from active - services do not work in General Topics

Outside WAN port staying red on backup PA-850 when failing over from active - services do not work

dromanelli — Wed, 12 Oct 2022 13:47:55 GMT

Hi All,

Having a strange issue. I have a cluster of PA-850's in HA. Last night I failed over my active PA-850 to the standby 850. What happened is the backup 850 became active, and the inside and DMZ ports went green, but the outside port Eth1/1 stayed red. As such, services did not work, and I had to fail back to the primary. Has anyone ever seen this before and if so, what is the fix? I'm on 10.1.3, which is why I was failing over - trying to get onto the preferred 10.1 release.

Re: Outside WAN port staying red on backup PA-850 when failing over from active - services do not work

JayGolf — Wed, 12 Oct 2022 17:35:24 GMT

Hi @dromanelli ,

Thanks for your question. There could be a number of reasons why the port is not coming up. What troubleshooting steps have you done so far? Has failover in the past been successful or was this the first test? Can you verify the speed/duplex settings are alike on both sides?

Re: Outside WAN port staying red on backup PA-850 when failing over from active - services do not work

JayGolf — Wed, 12 Oct 2022 17:41:11 GMT

If a link is not coming up I would do the following:

1. Verify there is no damage to the cable

2. Verify the correct cable type is being used

3. Verify the speed/duplex/IP settings are appropriate on both sides

4. Swap out the cable for a known working cable

5. Clear ARP at the upstream device

6. Try out a different port on your PA-850

Re: Outside WAN port staying red on backup PA-850 when failing over from active - services do not work

dromanelli — Wed, 12 Oct 2022 17:42:35 GMT

Hi Jay,

So this cluster is in a colo facility. I had remote hands check the cable and they certified it was good, and also had them power cycle the backup unit. I can't perform another test for a few hours (business impact) so I will try again later and let you know how it looks post-reboot.

Re: Outside WAN port staying red on backup PA-850 when failing over from active - services do not work

OtakarKlier — Wed, 12 Oct 2022 20:36:39 GMT

Hello,

What is the upstream device that your PAN plugs into? Could be an issue with it not liking the new path or something.

Regards,

Re: Outside WAN port staying red on backup PA-850 when failing over from active - services do not work

DavePalo — Fri, 21 Oct 2022 22:33:02 GMT

If you hover your mouse over the red port, what info does it show please?

How is the port configured? Just L3?