HA1 Backup link went down root cause analysis

[Venkatesan_radhakrishnan]

HI Team,

I have issue in Palo alto firewall 3260 where HA1 backup link went down. Eventhough there is no production impact i'm seeing this issue happened without any cable change or any activity.

This is due to ping failure for heart beat , But I want to know what caused this ping failure issue.

I have already running PANOS 8.1.4-h2 which says release notes that HA1 Backup port issue unexpected behaviour was fixed.

Below is error message

Error Msg
---------
flags    : 0x2 (close:)
err code : Heartbeat ping failure (16)
num tlvs : 1
  Printing out 1 tlvs
  TLV[1]: type 5 (ERR_STRING); len 23; value:
    48656172 74626561 74207069 6e672066 61696c75 726500

Regards

Venky

[Venkatesan_radhakrishnan]

@reaper @BPry, 

Can you guys look into  below error and let me know root cause. 

[reaper]

hi @Venkatesan_radhakrishnan

How is the HA1-backup connected (over a switch, directly,..? dedicated interface, mgmt, ...?), how were the link speed and duplex set on all connecting nodes, what type of cable was used, have you tried using a different cable/port,...?

the ha1-b issue solved in 8.1.4-h2 is a permanently down link, not one where there are ping timeouts, you are most likely experiencing something different

[Venkatesan_radhakrishnan]

Ya I'm experiencing something different, It is directly connected through cables via HA1 B port on both sides.

Link went down then I have clicked the HA1 Backup port settings selected the same interface it came up and no flap or down till date.

Firewall is already running 8.1.4-h2 version.

[Venkatesan_radhakrishnan]

@reaper I haven't tried using different cable it staright through. Once I select the same interface which was already in use and commit the configuration it started to work again.

I'm not seeing any abnormalities in the firewall related to that HA port.

Can I able to change the link state and speed for dedicated HA ports? If so how ?