- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
12-14-2018 10:09 AM
I have both PA-3220 HA1-A and HA1-B links connected back to back to each other with a previously verified cable but only HA1 is coming up greeen while HA1 Backup is showing down. The HA1-B interface LEDs on both PA-3220 show green.
Any feedback or suggestion is greatly appreciated.
03-16-2021 04:37 AM - edited 03-16-2021 04:39 AM
Same problem with upgrade to 9.1.7
Resolved by changing the ha1-b interface to management and than back again.
Reboot didn't help.03-18-2021 05:14 AM
I configured pair of PA 3220 in HA and running PAN OS 9.1.5 no issues with HA1 and HA1 backup so far.
Regards
03-24-2021 11:47 AM
problem still persists on 9.1.8
reconfigured and it started to work again
didn't try the reboot, this is faster 🙂
03-25-2021 12:28 PM
While upgrading PA 3260 from 8.1.15 to 9.1.5 I saw this issue first time.
Fix was to change HA1-b interface to Management and then back to HA1-b
Regards
05-02-2021 06:36 AM
For anyone ending up here first like I did - you need to set the gateway in the HA1 config. without it, the interface gets marked down. I just set the gateway to the IP of the HA1 interface of the other side on both sides and it cleared this issue.
03-13-2022 06:19 PM - edited 03-13-2022 06:25 PM
I'm running 9.1.13, on a pair of PA-3220s in active/standby directly connected to each other and have the same problem. HA1 backup is showing down, despite being able to clearly ping the peer in both directions, on all HA ports. I've swapped out cables, rebooted both, rebooted the passive unit, rebooted the active unit, everything all have tried in this thread. No luck. I've got a TAC case open since the 8th of March, Palo support has yet to figure out a solution.
09-24-2023 05:57 AM
I should've updated this a long time ago. My issue was human error, there was a typo in the IP address in the backup port.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!