05-19-2023 04:11 PM
Dear All,
Below is summary of issue and resolution.
1. We added a new firewall to HA set-up.
2. HA was established properly.
3. While doing config sync from active to passive it was falling with error Client ikemgr phase 1 failure
Resolution:
Upon deep dive it was figure out that Master key between Active and passive firewall is mistmached.
Push the correct Master key from Panorama to Passive firewall.
Issue is fixed.
Tip:
If Panorama is running in the environment, best practice is to go to Panorama-> Managed Devices-> Summary
compare all the fields and check the status of all fields are ok or not.
While adding a , config sync was failing from active to passive firewall.
