High Availability issue PA 2020

[sue_town]

I have 2 PA 2020's which have been running HA fine for about 2 weeks

now i see in the device that eth1/11 is showing as red/down in both firewalls

the system log shows per attached log (for pri and sec firewalls)

anyone have any ideas re this HA issue please?

thanks

[dburns]

Where there any other events happening such as a commit or update? Also in this HA do they plug into the same switch or a different switch?

Dominic

[sue_town]

hi dominic

no commits or updates happening....the trust/untrust ports do connect to the same switch

wierd problem...

thanks

Sue

[sue_town]

also the HA connections are

Primary

eth0/11 connects to secondary eth0/11

eth0/12 connects to secondary eth0/12

and i see that both devices are showing Mode Active passive on the HA dash

[dburns]

Could be a bad cable that is causing the link to go down. Are both devices showing active or is one still staying passive? If one is passive suspend the device and try swapping out the cable. If this does not work you may want to call into support to troubleshoot.

To suspend the device run the following command from CLI;

PA(passive)>  request high-availability state suspend

To make functional after cable swap run;

PA(suspended)> request high-availability state functional

Thanks,

Dominic

[Sanjeewa]

Hi,

You can do this configuration via Management port , I had the same issue but now its running perfectly..

Thanks

[Satish]

Hi Sue,

As per Dominic, please check, after that please please check  HA is enable or not,peer HA1 ip address is configure proper or not.

more info please find the below link : -  https://live.paloaltonetworks.com/docs/DOC-2926

Thanks

Satish

[Satish]

Hi Sue,

Please check the date and time and share the current logs .

Regards

Satish