HA strange behaviour

[soporteseguridad]

Hi, we have a cluster Active/passive PA3050 in PanOS 7.0.9. Yesterday we realised that one of our firewalls was having a strange behaviour (event HA), and this morning this FW was in maintenance mode, i had to reinstall the image 7.0.9 and cluster is OK now, but i dont know if this will solve the problem o the problem will happen again.

Can you tell me what it can means this logs related to HA??? any problem in 7.0.9??? 

 

Thanks

[reaper]

these messages indicate the HA links were flapping, which could have been caused by the interfaces on the peer going down and up

the fact the peer was in maintenance mode might be an indication it had some sort of hardware failure which caused it to reboot. after three reboots it will go into maintenance mode

did you happen to access the maintenance mode menu and verify the reason for maintenance mode, and possibly extracted a techsupport file after rebooting, before reinstalling ?

[soporteseguridad]

How can you verify the reason for main mode??? i went to maint mode, exported confgi and reinstal 7.0.9 image. Anything to keep in ming if it happens again??? how its possible to extract techsuppot from maint mode?

[reaper]

The first option in maintenance mode is to view the maintenance mode reason

extracting a techsupport file does require you boot into 'normal' mode

[TranceforLife]

Hi,

I would be nice to have a tech support file as you can check all logs and core files . This is how to do it from the main mode:

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Retrieve-the-Palo-Alto-Networks-Fire...

Thx,

Myky

[soporteseguridad]

OK .Perfect, if it happens again ill check maint reason. Im not very familiar with maint mode thanks god haha

[TranceforLife]

Hi Reaper,

In this case is it still worth do check current tech support or all logs (core files etc) gone after an upgrade?

Thx,

Myky