when upgrade 5260 to 9.1 and further intefaces are marked "POWER DOWN"

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Palo Alto Networks Approved
Palo Alto Networks Approved
Community Expert Verified
Community Expert Verified

when upgrade 5260 to 9.1 and further intefaces are marked "POWER DOWN"

L0 Member

We tried to upgrade our 5260 firewalls (in active active scenario) from 9.0.16-h2 to 9.1 and further the interface don't come up

ethernet1/5 68 ukn/ukn/down(power-down) 00:86:9c:60:xx:xx
ethernet1/6 69 ukn/ukn/down(power-down) 00:86:9c:60:xx:xx
ethernet1/7 70 ukn/ukn/down(power-down) 00:86:9c:60:xx:xx
ethernet1/8 71 ukn/ukn/down(power-down) 00:86:9c:60:xx:xx
ethernet1/14 77 ukn/ukn/down(power-down) 00:86:9c:60:xx:xx
ethernet1/15 78 ukn/ukn/down(power-down) 00:86:9c:60:xx:xx
ethernet1/16 79 ukn/ukn/down(power-down) 00:86:9c:60:xx:xx
ethernet1/17 80 ukn/ukn/down(power-down) 00:86:9c:60:xx:xx
ethernet1/18 81 ukn/ukn/down(power-down) 00:86:9c:60:xx:xx
ethernet1/19 82 10000/full/up 00:86:9c:60:xx:xx
ethernet1/20 83 10000/full/up 00:86:9c:60:xx:xx
ethernet1/21 84 ukn/ukn/down(power-down) 00:86:9c:60:xx:xx
ethernet1/22 85 ukn/ukn/down(power-down) 00:86:9c:60:xx:xx
ethernet1/23 86 100000/full/up 00:86:9c:60:xx:xx
ethernet1/24 87 100000/full/up 00:86:9c:60:xx:xx
ae1 16 [n/a]/[n/a]/up 00:86:9c:60:xx:xx
ae2 17 ukn/ukn/down(unknown) 00:86:9c:60:xx:xx
ae3 18 ukn/ukn/down(unknown) 00:86:9c:60:xx:xx
ha1-a 5 1000/full/up 00:86:9c:60:xx:xx
ha1-b 7 1000/full/up 00:86:9c:60:xx:xx
vlan 1 [n/a]/[n/a]/up 00:86:9c:60:xx:xx
loopback 3 [n/a]/[n/a]/up 00:86:9c:60:xx:xx
tunnel 4 [n/a]/[n/a]/up 00:86:9c:60:xx:xx
hsci 8 ukn/ukn/down(autoneg) 00:86:9c:60:xx:xx



Cyber Elite
Cyber Elite

power-down is when they're manually set to down via configuration


did this suddenly happen, did you reach out to support ?

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

Cyber Elite
Cyber Elite


Seems like your configuration migration during the upgrade process went a little haywire, but the fact that some of your dataplane interfaces are up is actually a good sign. If you haven't already, try simply turning the interfaces back up and committing the configuration to get the remaining online.

You'd want to make sure that the rest of your configuration is working properly assuming this was a migration issue. 

  • 2 replies
  • 101 Subscriptions
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!