Issue ports to switch turned (errdisabled) for both HA pair after upgrade from 11.1.6-h14 to 11.1.6-h25

[Fariq_Zaidi]

Hi All,

We have a pair PA 5220  in HA  x2  and in PAN-OS 11.1.6-h14
we perform upgrade to PAN-OS 11.1.6-h25, the upgrade is successful but we counter issue issue ports to switch turned (errdisabled) and it running normally after that 

First Pair HA we able to recover with shut/unshut the errdisabled interface

however the second pair we try the same but issue still persist. We don't have a choice to revert back to previous PAN-OS 11.1.6-h14 and marticulasly it no more errdisabled on interface and now working normally .

is this normally behavior or known issue on this model or PAN-OS?  

Thank you

[kiwi]

Hi @Fariq_Zaidi ,

This is definitely not normal behavior.

The errdisabled state could be due to link-flap detection or LACP timeouts during the DP initialization but there could be other reasons why this is happening as well,.

Since pair 2 did not recover, could you check the switch logs for the specific 'cause' of the errdisable (e.g., link-flap, loop-detect, or pagp-flap) before attempting the jump again.

Checking the switch logs should help you identify which guard (Loopback, Flap, or LACP) triggered the shutdown.

Kind regards,