topic Re: Running config not synchronized problem in General Topics

Running config not synchronized problem

MPI-AE — Mon, 25 Feb 2019 09:02:38 GMT

Hey all!

there are two pa 3020 with 8.0.7 in HA active passive.

Three days ago, I switched the passive fw to active.

Yesterday I switched back. I stated that the running config isn't synchronized, but I switched nevertheless.

So I think I should "sync to peer" in the HA dashboard. But from which firewall to which firewall?

Re: Running config not synchronized problem

reaper — Mon, 25 Feb 2019 09:17:09 GMT

you will need to verify the configuration between the firewalls and decide which one is the one you need to keep:

Re: Running config not synchronized problem

MPI-AE — Mon, 25 Feb 2019 09:32:55 GMT

@reaperWhen I compare the two configs as your screenshot shows, it shows me a lot of local settings that differ, for example:

hostname, management ip address, peer-ip, ha ip addresses.

I mean, that's okay since that are two physical firewalls.

But what happens when I sync the config?

Re: Running config not synchronized problem

aleksandar.astardzhiev — Mon, 25 Feb 2019 09:43:22 GMT

Hi @MPI-AE ,

Configuration audit is performing diff on the full configuration. That is why you will see some yellow lines that hostname, management IP etc are different between members.

If you check the documentation here you can see that none of these configurations will sync - What Settings Don’t Sync in Active/Passive HA?

So you may want to focus on the rest of the output from the config audit - on the configuration that is synchronized between member and will sync if you run "sync to peer"

Re: Running config not synchronized problem

MPI-AE — Mon, 25 Feb 2019 10:44:49 GMT

Thank you, that makes it clear!