Commit failure due to ha1-backup interface

[Hamids2021]

I recently imported a new pair of ha firewalls into Panorama; however, when I push the template with the option force template value enabled, I receive the following error:

**************************************************************************

High-availability ha1-backup interface ipaddr configured to match peer-ip-backup address ( module: ha_agent)

-client ha_agent phase 1 failure

_commit failed

*************************************************************************

Note:

-I've configured the ha1 backup on both firewalls to be the management interface.

-There are no issues when I push the templates without the force template value enabled.

-Panorama OS version is 10.1.5h1, and the firewalls are running on the same version.

[TomYoung · Accepted solution]

Hi @Hamids2021 ,

It looks like you are pushing the same IP address to both firewalls.  If you want to push the HA config from Panorama, you will need to use template variables so that the IP addresses are different.  Alternatively, you could remove the HA config from Panorama, and configure it locally.

Thanks,

Tom