topic HA Active/Passive with Preemption in General Topics

HA Active/Passive with Preemption

nattapong_thi — Tue, 30 Mar 2021 08:19:38 GMT

2 firewalls configured with HA active/passive, And enabled preempt on both of firewalls

Everythings find, can synchronize configuration and session

firewall-A is active-firewall with priority 100

firewall-B is passive-firewall with priority 120

HA timer settings is recommended

But when I was testing for HA switch over by unplugged a interface on Active firewall (firewall-A), firewall-A moves into passive state, then active state again then passive state finally moves into "Preempt loop detected",

Actually I know that it will switchover 3 times after change firewall-A to suspend state

Is that a normal situation? Why does firewall-A still need to preempt itself as a active firewall even I did not put cable back (port still down)?

Re: HA Active/Passive with Preemption

nikoolayy1 — Tue, 30 Mar 2021 11:45:38 GMT

Have you checked everything in this article by Palo Alto for such issues?

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClhJCAS

Re: HA Active/Passive with Preemption

nattapong_thi — Sun, 27 Jun 2021 15:03:57 GMT

Hi, I found a new useful ref:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClcACAS

Seem when we choose shutdown mode, it will cause a preemt loop, solved by choose auto mode instead

but for layer2 environment should keep shutdown mode and disable preempt option