topic Re: Network interfaces goes Down/Up after a HA failover in General Topics

Network interfaces goes Down/Up after a HA failover

asia — Tue, 06 Dec 2011 11:18:16 GMT

Hello,

We have an issue occuring in a HA cluster, the HA connection goes down, so a passive device transit to the active state and thene backword to passive due to a split brain recovery procedure (is it because of the heart-beat backup configured ?) and a second after all network interfaces goes up/down. Is this a normal behaviour?

We are running PAN-OS 4.0.5.

Regards

Re: Network interfaces goes Down/Up after a HA failover

rmonvon — Tue, 06 Dec 2011 16:24:42 GMT

Which HA connection went down, HA1 or HA2? Also, did you enable heartbeat backup on both PA devices?

You may want to configure the Promotion Hold Time and Preemption Hold Time under the HA setting so the passive device will wait before transitioning to active.

Preemption Hold Time

Enter the time a passive or active-secondary device will wait before taking over as the active or active-primary device (range 0-60000 ms, default 0 ms).

Promotion Hold Time

Enter the time that the passive device (in active/passive mode) or the active-secondary device (in active/active mode) will wait before taking over as the active or active-primary device after communications with the HA peer have been lost.

Re: Network interfaces goes Down/Up after a HA failover

ttongfly — Wed, 07 Dec 2011 14:17:08 GMT

Hello

I have experienced this issue on lower PANOS 4.0.x that makes fail-over and occurred HA split brain issue. It was occurred also when HA backup link configured phsycally and HA backup option configured.

I finally cleared this issue after upgrade PANOS 4.0.6 I guess this is critical issue on lower PANOS 4.0.x and suggest to upgrade PANOS higher version on 4.0.x.

Thanks.

Regards.

Roh.