topic Re: HA Pair manual syncronization in General Topics

HA Pair manual syncronization

danoman2 — Fri, 15 Apr 2022 12:32:02 GMT

Good morning, I'm trying to understand the behavior with this command request high-availability sync-to-remote running-config . I have a HA active/passive pair that I had some config sync issues after an OS upgrade.

If I want to push the active running configuration from my active device to my passive device, do I run this command from the active device or the passive device?

I would assume I would be running it from the active device.

Please advise,

Thanks Dan

Re: HA Pair manual syncronization

danoman2 — Fri, 15 Apr 2022 12:32:49 GMT

Oh along with this. Currently the config sync link is missing from the HA widget on the dashboard. Kinda strange.

Re: HA Pair manual syncronization

OtakarKlier — Fri, 15 Apr 2022 20:39:33 GMT

Hello,

I would verify your HA config first. However its best practice to sync from Active to Passive.

Regards,

Re: HA Pair manual syncronization

danoman2 — Mon, 18 Apr 2022 15:12:58 GMT

Thanks for the reply. That helped.

Re: HA Pair manual syncronization

danoman2 — Thu, 01 Sep 2022 12:49:37 GMT

I'm digging this one up as I'm now encountering the same issue I had the last time I did my PAN OS upgrade. After I suspend preemptive in the HA settings. I suspend the local device, the passive device becomes active. I install on newly passive device, I commit on the device Once the device reboots, I have an unsyncronized pair.

So, at this point I would like to copy the active running config from the active device to the passive device in an attempt to resync before continuing.

This is the command I'm running from the active device. I'm just confused on the language they use.

request high-availability sync-to-remote running-config
Executing this command will overwrite the candidate configuration on the peer and trigger a commit on the peer. Do you want to continue? (y or n)

In this instance will the candidate configuration of the remote device, aka the passive device will be over written by the current running config of the Active device?

Re: HA Pair manual syncronization

OtakarKlier — Thu, 01 Sep 2022 15:29:47 GMT

Hello,

Its always best to sync from the active to the passive device. If performing updates. DO all commit's prior to the upgrade and just let things sync naturally.

When performing a sync from one device, it will overwrite the other.

Hope that helps.

Re: HA Pair manual syncronization

danoman2 — Mon, 31 Oct 2022 14:00:35 GMT

Good afternoon gentlemen. I am Dan Ross from this post above. I've recently left my position with the agency I worked for during the time of this posting. Is there anyway that I can migrate my account to a new account if I don't have access to the email address of the old account? Please direct me to the appropriate party that might be able to help. I suspect that without access I will not be able to transfer. Eitherway thanks for the help.

Re: HA Pair manual syncronization

BPry — Mon, 31 Oct 2022 16:44:38 GMT

@danoman2,

You can email community@paloaltonetworks.com and they can give you access to your original account.

Re: HA Pair manual syncronization

danoman2 — Wed, 02 Nov 2022 17:45:29 GMT

I've heard nothing back from them as of yet, thanks for the heads up. I'm hoping I can merge the two accounts. My fear is they're going to do this without warning and I'll loose all of my beacon certs.

Re: HA Pair manual syncronization

danoman2 — Fri, 04 Nov 2022 18:56:12 GMT

Looks like they took care of it for me. Thanks!