07-24-2026 07:32 AM
I've inherited a setup which has PAs with two vsys each connecting:
external switch/router > PA external vsys > A10 Load Balancers > PA internal vsys > Cisco Nexus Leaf switches
We run a full mesh setup (1x interface from each side of the PA HA pair to each (upstream switch, external A10, internal A10) internal device, both primary and secondary side. Then on the inside from the Nexus leaf switches to the PA we run ae1 with 2 interfaces to each (pair) of leafs (1 & 2, 3 & 4).
I've been troubleshooting slow failover (2-5 minutes) between PAs but in trying to turn up HA Passive Link State: Auto (locally committed on my PAs) it took down the whole site. And I'm thinking there's some sort of configuration issue with the leaf connections to the PAs. To clarify:
On the leafs there are 2x unique VPCs (1 & 2, 3 & 4) and each pair of PA connections is on a port-channel for each of those VPC pairs (they're the same number, but physically/logically separate). Can anyone think of any reason this wouldn't work as is?
07-24-2026 09:28 AM
Did you review the logs on the Nexus and PAN side of things to see what they were doing during the outage? When you set the passive link state to Auto, did you also go into your AE interfaces and toggle the 'Enable in HA Passive State' under LACP?
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
