11-23-2016 07:36 PM
Figured this out the hard way. If you create a custom BFD profile in Active / Active HA mode, the BFD profile names need to be unique to each device. If you try to configure a BFD profile with the same name on both devices, BFD will not come up.
If you do try to configure a BFD profile with the same BFD profile name and you make and commit changes afterwards, the second PA will complain that the BFD profile does not exist when you try to commit changes on the second PA. In short, the second PA will have the BFD profile removed from the config. Again, this only happens if you try to use the same BFD profile name on both PAs.
01-11-2017 10:48 AM - edited 01-11-2017 10:59 AM
This has been address in PAN-OS 7.1.7, which is now available for download. Please review the release notes for PAN-65738
You will find on https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/networking/bfd-overview the following line, "Active/passive HA peers synchronize BFD configurations and sessions; active/active HA peers do not."
Best regards,
Jerald
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
