Showing results for 
Show  only  | Search instead for 
Did you mean: 

Who Me Too'd this topic

Client ikemgr phase 1 failure

L1 Bithead

Dear All,


Below is summary of issue and resolution.


1. We added a new firewall to HA set-up.

2. HA was established properly.

3. While doing config sync from active to passive it was falling with error Client ikemgr phase 1 failure



Upon deep dive it was figure out that Master key between Active and passive firewall is mistmached.

Push the correct Master key from Panorama to Passive firewall.

Issue is fixed.



If Panorama is running in the environment, best practice is to go to Panorama-> Managed Devices-> Summary  

compare all the fields and check the status of all fields are ok or not.


While adding a , config sync was failing  from active to passive firewall.

Who Me Too'd this topic