HA Pair manual syncronization

[danoman2]

Good morning, I'm trying to understand the behavior with this command  request high-availability sync-to-remote running-config .  I have a HA active/passive pair that I had some config sync issues after an OS upgrade.  

If I want to push the active running configuration from my active device to my passive device, do I run this command from the active device or the passive device?  

I would assume I would be running it from the active device.

Please advise,

Thanks Dan

[danoman2]

Oh along with this.  Currently the config sync link is missing from the HA widget on the dashboard.  Kinda strange.

[OtakarKlier]

Hello,

I would verify your HA config first. However its best practice to sync from Active to Passive.

Regards,

[danoman2]

Thanks for the reply.  That helped.

[danoman2]

I'm digging this one up as I'm now encountering the same issue I had the last time I did my PAN OS upgrade.  After I suspend preemptive in the HA settings. I suspend the local device, the passive device becomes active.  I install on newly passive device, I commit on the device  Once the device reboots, I have an unsyncronized pair. 

So, at this point I would like to copy the active running config from the active device to the passive device in an attempt to resync before continuing.

This is the command I'm running from the active device.  I'm just confused on the language they use. 

request high-availability sync-to-remote running-config
Executing this command will overwrite the candidate configuration on the peer and trigger a commit on the peer. Do you want to continue? (y or n)

In this instance will the candidate configuration of the remote device, aka the passive device will be over written by the current running config of the Active device?

[OtakarKlier]

Hello,

Its always best to sync from the active to the passive device. If performing updates. DO all commit's prior to the upgrade and just let things sync naturally.

When performing a sync from one device, it will overwrite the other.

Hope that helps.

[danoman2]

Good afternoon gentlemen.  I am Dan Ross from this post above.  I've recently left my position with the agency I worked for during the time of this posting.  Is there anyway that I can migrate my account to a new account if I don't have access to the email address of the old account?  Please direct me to the appropriate party that might be able to help.  I suspect that without access I will not be able to transfer.  Eitherway thanks for the help.

[BPry]

@danoman2,

You can email community@paloaltonetworks.com and they can give you access to your original account. 

[danoman2]

I've heard nothing back from them as of yet, thanks for the heads up.  I'm hoping I can merge the two accounts.  My fear is they're going to do this without warning and I'll loose all of my beacon certs.

[danoman2]

Looks like they took care of it for me.  Thanks!