High Availability - Active goes down due to non-functional

[JoHyeonJae]

Hello all,

Last Sunday (6/26) at 5:37:27 PM, a failover occurred due to an Ethernet 1/22 interface down on the customer's Active Firewall.

I have looked around the log to analyze the cause, but the CPU was not high and I couldn't find the cause.

The figure below is ha-agent and route log. Do you know why such an error occurs?

<routed.log>

<ha-agent.log>

<routed.log>

The bug below can cause this problem?

PAN-179274 - Fixed an issue on high availability configurations where, after upgrading to PAN-OS 9.1.10, PAN-OS 10.0.6, or PAN-OS 10.1.0, the high availability (HA1) and HA1-Backup link stayed down. This issue occurred when the peer firewall IP address was in a different subnet.

#HA failover 

Best Regards,

[JayGolf]

Hi @JoHyeonJae ,

I would look into why eth1/22 went down. Try running the following commands: 

- show interface ethernet 1/22 and check for errors

- less mp-log brdagent.log to provide more details regarding port issues

Also, can you clarify the exact issue you are having please? Are you saying after finding out eth1/22 went down failover to the passive did not succeed? 

[JoHyeonJae]

@JayGolf 
Are you saying after finding out eth1/22 went down failover to the passive did not succeed? 
Yes, that is right.

During the search, we did not find any failure (DP, slot, kernel, or OS) from the firewall side. It looks more like a cable issue or local network topology/network connection issue.