PA -5060 Version: 8.1.24 , All the interfaces flapped simlutanesouly

[VirupakshaRajapur]

Hi Team,

We have observed a situation where all the connected interfaces were flapped on the Firewall with the below logs, there is no much conclusive evidence in the tech-support logs, not sure if i am missing the log file which has the reason for this cause.

LACP interface ethernet1/2 moved into AE-group ae3.

LACP interface ethernet1/1 moved into AE-group ae3.

LACP interface ethernet1/23 moved into AE-group ae2.

LACP interface ethernet1/22 moved into AE-group ae1.

LACP interface ethernet1/21 moved into AE-group ae1.

LACP interface ethernet1/7 moved into AE-group ae5.

LACP interface ethernet1/6 moved into AE-group ae5.

Chassis Master Alarm: Cleared

LACP interface ethernet1/24 moved out of AE-group ae2. Selection state Unselected(Link down)

LACP interface ethernet1/23 moved out of AE-group ae2. Selection state Unselected(Link down)

LACP interface ethernet1/22 moved out of AE-group ae1. Selection state Unselected(Link down)

LACP interface ethernet1/2 moved out of AE-group ae3. Selection state Unselected(Link down)

LACP interface ethernet1/1 moved out of AE-group ae3. Selection state Unselected(Link down)

LACP interface ethernet1/21 moved out of AE-group ae1. Selection state Unselected(Link down)

LACP interface ethernet1/7 moved out of AE-group ae5. Selection state Selected

LACP interface ethernet1/6 moved out of AE-group ae5. Selection state Selected

LACP interface ethernet1/6 moved into AE-group ae5.

LACP interface ethernet1/7 moved into AE-group ae5.

LACP interface ethernet1/7 moved out of AE-group ae5. Selection state Unselected(Link down)

LACP interface ethernet1/6 moved out of AE-group ae5. Selection state Unselected(Link down)

HA Group 2: Link group 'COM_ZONE' failure; all links are down

HA Group 2: Link group 'Swift' failure; all links are down

Chassis Master Alarm: HA-event

HA Group 2: Moved from state Active to state Non-Functional

HA Group 2: Link group 'GIFT_DMZ' failure; all links are down

LACP interface ethernet1/6 moved into AE-group ae5.

LACP interface ethernet1/7 moved into AE-group ae5.

LACP interface ethernet1/7 moved out of AE-group ae5. Selection state Selected

LACP interface ethernet1/7 moved into AE-group ae5.

LACP interface ethernet1/7 moved out of AE-group ae5. Selection state Unselected(Link down)

LACP interface ethernet1/6 moved out of AE-group ae5. Selection state Unselected(Link down)

HA Group 2: Link group 'GIFT_DMZ' failure; all links are down

Please advise the reason for the failures and how to mitigate.

As we also understand the version 8.1.24 is already EOS , but client planning to upgrade the firewalls shortly.

[VirupakshaRajapur]

@sawjain Any feedback on the above, as per client the connected don't have any issues during the time of the issue

[sawjain · Accepted solution]

Hello Virupaksha,

These logs are not sufficient to give any conclusion.

Please upload the TSF in the PANTS tool and share the PANTS link over the mail and also the complete description of the issue.

I will provide further information from there. 

Also, make sure next time you will post your query in "ASC Discussion Forum" 

https://live.paloaltonetworks.com/t5/asc-discussion-forum/bd-p/ASCDiscussions 

[VirupakshaRajapur]

Hello Sawan,

Thanks for your response.

I will share the PANTS link over the email and the description for your feedback.

Also will make sure the query is posted on the ASC discussion forum from next time.

Meanwhile i will continue review the tech-support logs.