topic Active / Active Config sync in General Topics

Active / Active Config sync

rperkin — Thu, 26 Sep 2013 09:11:51 GMT

I am setting up a pair of 5020's in an Active / Active configuration.

I am getting confused over the config sync feature and have been overwriting configs on each box.

i.e I configured some aggregate interfaces on Box 1 and then I synced the config on Box 2 which overwrote the config and wiped them out.

I am also in a situation now where the GUI says Running Config not syncronised and if I try to sync it fails, however if I initiate a manual sync it works?

PA-5020-1(active-primary)> request high-availability sync-to-remote running-config

Successfully synchronized running configuration with HA peer

admin@PA-5020-1(active-primary)>

Is anyone running an Active / Active setup.

I just need some basic info on what the best way to drive these boxes is?

Thanks

Roger

Re: Active / Active Config sync

rperkin — Thu, 26 Sep 2013 15:08:32 GMT

This is now working now as I think I just had commited too many changes on different boxes.

However one annoying behaviour is if I put a description on int E1/1 on PA1 then sync the configs it overwrites the description on PA2 e1/1

How do I stop this happening as each interface goes to a different port on the downstream switch

Re: Active / Active Config sync

zarina — Fri, 27 Sep 2013 23:48:25 GMT

I was able to confirm this behavior in the lab: zones & comments get synced between the 2 devices. This is an expected behavior as the zones & interfaces get synced except for ip addresses in A/A setup. You can refer this document for a list of configs that sync between the peer units: https://live.paloaltonetworks.com/docs/DOC-5086