Network interfaces goes Down/Up after a HA failover

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Network interfaces goes Down/Up after a HA failover

L3 Networker

Hello,

We have an issue occuring in a HA cluster, the HA connection goes down, so a passive device transit to the active state and thene backword to passive due to a split brain recovery procedure (is it because of the heart-beat backup configured ?) and a second after all network interfaces goes up/down. Is this a normal behaviour?

We are running PAN-OS 4.0.5.

Regards

2 REPLIES 2

L6 Presenter

Which HA connection went down, HA1 or HA2?  Also, did you enable heartbeat backup on both PA devices?

You may want to configure the Promotion Hold Time and Preemption Hold Time under the HA setting so the passive device will wait before transitioning to active.

Preemption Hold Time

Enter the time a passive or active-secondary device will wait before taking over as the active or active-primary device (range 0-60000 ms, default 0 ms).

Promotion Hold Time

Enter the time that the passive device (in active/passive mode) or the active-secondary  device (in active/active mode) will wait before taking over as the  active or active-primary device after communications with the HA peer  have been lost.

L3 Networker

Hello

I have experienced this issue on lower PANOS 4.0.x that makes fail-over and occurred HA split brain issue. It was occurred also when HA backup link configured phsycally and HA backup option configured.

I finally cleared this issue after upgrade PANOS 4.0.6 I guess this is critical issue on lower PANOS 4.0.x and suggest to upgrade PANOS higher version on 4.0.x.

Thanks.

Regards.

Roh.

  • 3667 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!