Reason for Sudden Reboot of PA-820

[Purushotham]

1. Need to get the confirmation on the reason for the sudden reboot of the PA-820 device which is in High-Availability state.

2. Only the Primary Unit has faced sudden Reboot but Secondary did not, Checked for the power adapter of the Primary unit but it was fine.

3. Timestamp of the sudden reboot on a primary PA-820 (HA-Active) unit is on 9/5/2023 at around 11:36AM and for the mentioned timestamp there is alert in the system logs with the below Error Messages, please refer below.

 >  DHCP lease end alert 

 >  -registered-Ip-max-platform-limit-exceeded alert 

4. But couldn't find any proof or related articles from the Palo Alto to confirm the Root-Cause is caused due to this errors.

5.Checked this article but no use.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PM3ZCAW

6. Can anyone please assist me on this.

7. Please update if any further clarifications required.

[BPry]

@Purushotham,

The "max registered-ip" error that you're seeing shouldn't cause the firewall to reload and it isn't necessarily an uncommon thing to run into on the 820s especially with how low there platform limits are. If you want a root cause analysis of the crash however you really do need to contact TAC; someone with access to the technical support file (and therefore all of the proper log files) is the only person who could give you a definitive answer. 

[Purushotham]

Hi @BPry,

Okay, Noted.

Thank You

Regards,

Purushotham V

[akuzhuppilly]

Hello,

There are hardware/software issues that can cause silent reboots.

The root cause needs to be investigated, I would advice to open a case with TAC.