Cannot Sync Running Config in HA active/passive

Reply
L4 Transporter

Cannot Sync Running Config in HA active/passive

Hi All,

 

I have a PA3020 with 7.0.5-h2 PAN-os version.

I have tried different times to sync manually the running config on passive member without success.

 

I can clearly see from the Active Member's "ha_agent.log" these errors:

=========================

(active)> tail mp-log ha_agent.log
00000001
TLV[2]: type 11 (SYSD_PEER_DOWN); len 4; value:
00000000

2016-08-05 10:03:00.924 +0200 debug: ha_state_cfg_commit_fail(src/ha_state_cfg.c:682): Commit failure on peer device
2016-08-05 10:03:00.924 +0200 Error: ha_state_cfg_dosync_fail(src/ha_state_cfg.c:427): Group 1: Config sync start failed on local mgmt srvr
2016-08-05 10:03:00.924 +0200 debug: ha_sysd_dev_cfgsync_update(src/ha_sysd.c:1345): Set dev cfgsync to Out-of-Sync
2016-08-05 10:03:00.924 +0200 debug: ha_state_cfg_dosync_fail(src/ha_state_cfg.c:438): Group 1: setting reason to failure for config sync when we got a dosync failure
2016-08-05 10:03:00.924 +0200 debug: ha_state_cfg_sync_callback(src/ha_state_cfg.c:920): ha_state_cfg_sync_callback: retries: 4; insync: no
2016-08-05 10:03:00.924 +0200 Warning: ha_event_log(src/ha_event.c:47): HA Group 1: Running configuration not synchronized after retries

=========================

 

I have checked all settings for both cluster member and also App&threats etc.

Everything is matched.

 

I have already reboot the passive member, but unfortunately nothing is changed.

 

What should I do?

Suggestions?

 

Best Regards

Luca

Tags (2)
Community Manager

Re: Cannot Sync Running Config in HA active/passive

Hi Luca

 

have you tried restarting the management process on the active peer:

> debug software restart process management-server 

Help the community: Like helpful comments and mark solutions
Reaper out
L4 Transporter

Re: Cannot Sync Running Config in HA active/passive

Hi Reaper,

 

Can this one cause an impact on a production enviroment?

 

BR

Luca

L6 Presenter

Re: Cannot Sync Running Config in HA active/passive

Hi,

 

Don't think so as it is just a management-server. Just tried in my lab, all good. no interruption 

L4 Transporter

Re: Cannot Sync Running Config in HA active/passive

Hi @TranceforLife,

 

Thanks both @TranceforLife @reaper for your suggestion.

Also last question?

 

Why this happen? Everything works fine until one week ago?

Maybe uptime can cause this issue (process that are up for long time period not working properly??).

 

BR

Luca

Community Manager

Re: Cannot Sync Running Config in HA active/passive

Hi Luca

 

it could be the process has become bogged down a little by it's uptime and memory consumption. Impact of restart should be minimal, only side effect that comes to mind that dynamic url lookups (non-cached) may not function for the duration of the process restart (few seconds)

 

 

regards

Tom


Help the community: Like helpful comments and mark solutions
Reaper out
L4 Transporter

Re: Cannot Sync Running Config in HA active/passive

Hi All,

 

Mp restarted but issue still the same.

 

:(

 

BR

Luca

L4 Transporter

Re: Cannot Sync Running Config in HA active/passive

seems for me restarting the MP server fixed the issue

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!