topic Re: Panorama HA Sync Failed in General Topics

Panorama HA Sync Failed

Jon_Palo92 — Thu, 09 May 2024 02:59:05 GMT

Hello friends,

I built new vm Panorama in HA design and they are connected fine and sync'd. However, when I enabled the encryption "Encryption Enabled", the Panorama sync'd failed. I have already exported and imported the HA keys from/to both Panorama devices.

Based on the documentation, the Panorama is using TCP/28 for HA connection once the "Encryption Enabled" is enabled, but I tried to test the Port/28 directly to the Panorama, and the it looks like not open.

Please can you advise.

Re: Panorama HA Sync Failed

PavelK — Fri, 10 May 2024 00:11:44 GMT

Hello @Jon_Palo92

thanks for posting.

Could you go to CLI of Panorama and issue below command to confirm it is listening on TCP 28:

show netstat listening yes numeric yes | match \b28\b

Based on my past experience (limited to M series of Panorama) there is no extra step to enable it except of importing certificates.

Kind Regards

Pavel