- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
06-22-2026 08:08 AM
Our customer has 2 PA-3420's running in Active Active HA which are currently out of sync.
All criteria on the HA widget matches across the two devices.
When we attempt to sync to peer from the active-primary we get a commit failure on the active secondary stating:
invalid interface address XXX-XXX-XXX-XXX-30(Module: routed)
client routed phase 1 failure
Commit failed.
Can anyone tell me why this is? The address stated in the error message is currently configured to a sub interface on the active secondary.
All dataplane interface IP's across the two devices do not match.
Kind Regards
Nathan Gibson
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!

