topic Re: PA HA - "ping timeout & "No buffer space issue" in General Topics

PA HA - "ping timeout & "No buffer space issue"

preetpk — Sun, 23 May 2021 12:44:29 GMT

Hi,

There are some error logs showing on output of "less mp-log ha_agent.log" in PA cli. Just want to understand what can be the root cause of the error logs.

Presently was are not using mgmt interface as HA1 backup, not sure why below error log is coming:

"2021-05-17 23:10:11.338 +0400 Error: ha_ping_peer_miss(src/ha_ping.c:756): Missed 1 ping timeouts out of 3 (mgmt)"

"2021-05-17 23:10:15.339 +0400 Error: ha_ping_peer_miss(src/ha_ping.c:756): Missed 1 ping timeouts out of 3 (mgmt)"

Need to know what can be cause of this error logs:

"2021-05-23 10:20:26.833 +0400 Error: ha_ping_send(src/ha_ping.c:598): Unable to send icmp packet:(errno: 105) No buffer space available"
2021-05-23 10:20:27.834 +0400 Error: ha_ping_send(src/ha_ping.c:598): Unable to send icmp packet:(errno: 105) No buffer space available"

Re: PA HA - "ping timeout & "No buffer space issue"

S.Cantwell — Sun, 23 May 2021 18:44:10 GMT

Hello

For the ping command, it appears that HA1 is not completing all of its pings.

For the no-bufffer, it seems like the FW is out of resources.

My suggestion is to be a reboot of the FW to see if this resolves one or both issues.

Let us know.

Re: PA HA - "ping timeout & "No buffer space issue"

preetpk — Mon, 24 May 2021 05:21:32 GMT

Thanks for the response.

One query, just for clarification -

We are presently not using Mgmt interface on HA1 backup, not sure why below error message is showing "mgmt". Is it like, HA ping is getting initiated over mgmt interface.

"2021-05-17 23:10:11.338 +0400 Error: ha_ping_peer_miss(src/ha_ping.c:756): Missed 1 ping timeouts out of 3 (mgmt)"

"2021-05-17 23:10:15.339 +0400 Error: ha_ping_peer_miss(src/ha_ping.c:756): Missed 1 ping timeouts out of 3 (mgmt)"

Re: PA HA - "ping timeout & "No buffer space issue"

MP18 — Mon, 24 May 2021 05:58:16 GMT

@preetpk

HA1 uses there dedicated link to make sure both peers are up.

Which firewall model you have?

Are you using HA1 backup link also?

I will check the HA1 connection on both firewalls for any physical issues first?

Do you have high DP CPU?

Regards

Re: PA HA - "ping timeout & "No buffer space issue"

nikoolayy1 — Tue, 01 Jun 2021 09:44:11 GMT

I have had similar issues with the heartbeat backup and on the higher end devices with dedicated HA ports it is not needed. This why MP18 ask what is your platform.

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/high-availability/ha-concepts/ha-links-and-backup-links.html

https://live.paloaltonetworks.com/t5/best-practice-assessment-device/high-availability-ha-heartbeat-backup/ta-p/338210

This is my article where I asked similar questions like you. You may review it (expecially the info for bug PAN-114648😞

https://live.paloaltonetworks.com/t5/general-topics/palo-alto-7000-heartbeat-backup-icmp-fail/m-p/386566#M90275