Cannot Sync Running Config in HA active/passive

[TheRealDiz]

Hi All,

I have a PA3020 with 7.0.5-h2 PAN-os version.

I have tried different times to sync manually the running config on passive member without success.

I can clearly see from the Active Member's "ha_agent.log" these errors:

=========================

(active)> tail mp-log ha_agent.log
00000001
TLV[2]: type 11 (SYSD_PEER_DOWN); len 4; value:
00000000

2016-08-05 10:03:00.924 +0200 debug: ha_state_cfg_commit_fail(src/ha_state_cfg.c:682): Commit failure on peer device
2016-08-05 10:03:00.924 +0200 Error: ha_state_cfg_dosync_fail(src/ha_state_cfg.c:427): Group 1: Config sync start failed on local mgmt srvr
2016-08-05 10:03:00.924 +0200 debug: ha_sysd_dev_cfgsync_update(src/ha_sysd.c:1345): Set dev cfgsync to Out-of-Sync
2016-08-05 10:03:00.924 +0200 debug: ha_state_cfg_dosync_fail(src/ha_state_cfg.c:438): Group 1: setting reason to failure for config sync when we got a dosync failure
2016-08-05 10:03:00.924 +0200 debug: ha_state_cfg_sync_callback(src/ha_state_cfg.c:920): ha_state_cfg_sync_callback: retries: 4; insync: no
2016-08-05 10:03:00.924 +0200 Warning: ha_event_log(src/ha_event.c:47): HA Group 1: Running configuration not synchronized after retries

=========================

I have checked all settings for both cluster member and also App&threats etc.

Everything is matched.

I have already reboot the passive member, but unfortunately nothing is changed.

What should I do?

Suggestions?

Best Regards

Luca

[reaper]

Hi Luca

have you tried restarting the management process on the active peer:

> debug software restart process management-server 

[TheRealDiz]

Hi Reaper,

Can this one cause an impact on a production enviroment?

BR

Luca

[TranceforLife]

Hi,

Don't think so as it is just a management-server. Just tried in my lab, all good. no interruption 

[TheRealDiz]

Hi @TranceforLife,

Thanks both @TranceforLife @reaper for your suggestion.

Also last question?

Why this happen? Everything works fine until one week ago?

Maybe uptime can cause this issue (process that are up for long time period not working properly??).

BR

Luca

[reaper]

Hi Luca

it could be the process has become bogged down a little by it's uptime and memory consumption. Impact of restart should be minimal, only side effect that comes to mind that dynamic url lookups (non-cached) may not function for the duration of the process restart (few seconds)

regards

Tom

[TheRealDiz]

Hi All,

Mp restarted but issue still the same.

😞

BR

Luca

[MP18]

seems for me restarting the MP server fixed the issue