Client ikemgr phase 1 failure

[manninegi1985]

Dear All,

Below is summary of issue and resolution.

1. We added a new firewall to HA set-up.

2. HA was established properly.

3. While doing config sync from active to passive it was falling with error Client ikemgr phase 1 failure

Resolution:

Upon deep dive it was figure out that Master key between Active and passive firewall is mistmached.

Push the correct Master key from Panorama to Passive firewall.

Issue is fixed.

Tip:

If Panorama is running in the environment, best practice is to go to Panorama-> Managed Devices-> Summary  

compare all the fields and check the status of all fields are ok or not.

While adding a , config sync was failing  from active to passive firewall.

[S.Cantwell · Accepted solution]

Good info and I am glad you resolve your issue.