ACTICE/PASSIVE CONFIG SYNC PROBLEM( Running cofiguration not synchronize)

Announcements

Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.

Reply
Jafar_Hussain
L4 Transporter

ACTICE/PASSIVE CONFIG SYNC PROBLEM( Running cofiguration not synchronize)

Hello All,

 

The firewalls are configured in high availability (A/P) but the running configuration is not synchronized.

run-confi.PNG

 

I have already tried to restarting management server of both firewall as well I tried to sync manually but getting below error:-

 

run-confi.2.png

 

 

After that, I have tried to sync from CLI mode by this command:- request high-availability sync-to-remote running-config

 

is showing failed to synchronize running-config.

 

Can anyone help me?

 

 

 

 

 

 

MP18
Cyber Elite

On the Active PA click on syn to peer 

Also before that install all the dynamic updates on both active and passive firewall

MP
Jafar_Hussain
L4 Transporter

@MP18  I have tried already but same issue persist.

MP18
Cyber Elite

Try this on PAssive PA

 

 request high-availability sync-to-remote running-config

MP
Jafar_Hussain
L4 Transporter

@MP18  I have tried this command to both firewall but same issue was happening.

MP18
Cyber Elite

On active PA any change done?

if you revert back to previous config on active PA does it work?

 

Paste the output of 

less mp-log ha_agent.log

MP
MP18
Cyber Elite

Also For successful HA configuration, the below must match between the two firewalls.

 

Version Compatibility:
Software Version: Match
Application Content Compatibility: Match
Anti-Virus Compatibility: Match
Threat Content Compatibility: Match
VPN Client Software Compatibility: Match
Global Protect Client Software Compatibility: Match
MP
Jafar_Hussain
L4 Transporter

@ It is necessary to import all certificates from active firewall to passive firewall?

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!