gre tunnel problem in HA (Active/Passive)

DAEHOJUNG — Tue, 08 Aug 2023 06:04:52 GMT

Hi everyone,

I have a problem about gre tunnel in HA (active/passive).

Currently, two PA-220 firewalls are configured as active-passive HA. (Settings are also synced between the two devices.)

If I configure and commit the gre tunnel on the active device, the gre tunnel is up on the active device while the config is synced to the HA device.

However, when the config sync was completed (configuration commit is completed) in the passive device, the active device's gre tunnel goes down and the passive device's gre tunnel goes up.

In the HA configuration, the link state of the passive device is set to shutdown, and the link is actually marked as down.

In addition, if I apply the source as the IP of the interface for (gre tunnel) in the cli and ping to the IP of the gre tunnel peer device, ping is possible only from the active device, and ping is not possible from the passive device.

I can't understand these symptoms. Has anyone experienced any of these symptoms?

If anyone knows a solution, please share.

Thank you.

Re: gre tunnel problem in HA (Active/Passive)

BPry — Tue, 08 Aug 2023 13:13:32 GMT

@DAEHOJUNG,

Can you list the PAN-OS version that you are running. I recall seeing a similar issue mentioned in one of the various release notes, might be something to check on at the very least.

Re: gre tunnel problem in HA (Active/Passive)

DAEHOJUNG — Fri, 18 Aug 2023 01:24:57 GMT

Thanks for your interest in my question.

The OS version I am currently using is 10.2.3.

topic Re: gre tunnel problem in HA (Active/Passive) in General Topics

gre tunnel problem in HA (Active/Passive)

Re: gre tunnel problem in HA (Active/Passive)

Re: gre tunnel problem in HA (Active/Passive)