HA2 link down

Reply
Highlighted
L4 Transporter

HA2 link down

The 20G link for HA2 between the two PA-5220 firewalls (Active-Passive cluster) does not work correctly. It is a direct link using single-mode fiber and 10G-LR optics with a length of approximately 550 meters.

After restarting any of the two firewalls, the HA2 link does not raise (in the Down state). We only managed to lift it after disconnecting and reconnecting the fiber patch on either of the two firewalls.

On other occasions, the HSCI port enters a flaping loop (UP / Down) continuously. It is solved by disconnecting the fiber.

We have certified the single mode link with 20G-LR working fine(included patch cords).

The firmware version of the fws is 8.0.12.

 

Its seems like a bug but i can not find any bug related to this in 8.0.12.


Accepted Solutions
Highlighted
Cyber Elite

Re: HA2 link down

@jesuscano,

The HSCI interface has been causing a lot of issuess on the PA-3200 series as of late, but I haven't heard about many issues with the 5200 series. I'd do what @Brandon_Wertz recommends and open a ticket on the manner, it appears that HSCI is really finiky at the moment and might be better avoided if your setup allows for it. 

View solution in original post


All Replies
Highlighted
Cyber Elite

Re: HA2 link down

I just had a call with Palo yesterday, and I seem to recall hearing about a HSCI bug...might want to open a support case on your issue.

Highlighted
Cyber Elite

Re: HA2 link down

@jesuscano,

The HSCI interface has been causing a lot of issuess on the PA-3200 series as of late, but I haven't heard about many issues with the 5200 series. I'd do what @Brandon_Wertz recommends and open a ticket on the manner, it appears that HSCI is really finiky at the moment and might be better avoided if your setup allows for it. 

View solution in original post

Highlighted
Cyber Elite

Re: HA2 link down

We have PA 5220 in Active passive running Pan OS 8.1.9

We have HA2  connection on HSCI port with 40Gig QSFP ER

 

Every few hours link goes down and then comes back automatically

 

In other words it is flapping.

Fiber is single mode tested and also QSFP+ tested and certified.

 

Any ideas?

MP
Highlighted
Cyber Elite

Re: HA2 link down

@MP18,

Are these physically separated by a distance that justifies SM or are these sitting in close proximity?  

Highlighted
Cyber Elite

Re: HA2 link down

Yes they are 10km apart and we are using single mode with right QSFP

MP
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!