Active Active HA Out of Sync due to invalid interface address commit failed.

N.Gibson577756 — Mon, 22 Jun 2026 15:08:06 GMT

Our customer has 2 PA-3420's running in Active Active HA which are currently out of sync.

All criteria on the HA widget matches across the two devices.

When we attempt to sync to peer from the active-primary we get a commit failure on the active secondary stating:

invalid interface address XXX-XXX-XXX-XXX-30(Module: routed)

client routed phase 1 failure

Commit failed.

Can anyone tell me why this is? The address stated in the error message is currently configured to a sub interface on the active secondary.

All dataplane interface IP's across the two devices do not match.

Kind Regards

Nathan Gibson

topic Active Active HA Out of Sync due to invalid interface address commit failed. in General Topics