HA A/P on AZURE IP floating

[IMADHA]

Hello,

i configured HA actif / passif on azure when the failovor occurs the floating IP still on the First Firewall, she not move for the seconf that he becomes Actif.

- all permiissions are gived 

-configuration is a same to the Knowledge base

-test plugin is passed

in logs i see that and i dont know what that's mean : 

2022-06-29 17:41:54.307 +0200 vm_ha_state_trans INFO: : Sending detach command for NIC : None
2022-06-29 17:41:54.337 +0200 vm_ha_state_trans INFO: : Instance running in region '-----europe'
2022-06-29 17:41:54.338 +0200 vm_ha_state_trans INFO: : URL for put request: https://management.azure.com/None?api-version=2019-11-01
2022-06-29 17:41:54.455 +0200 vm_ha_state_trans INFO: : Put Request Failed: 404

thank you all fou your help

[ThomasTang]

You can double check do u have below permission first on the Azure Service Principal

Microsoft.Authorization/*/read

Microsoft.Compute/virtualMachines/read

Microsoft.Network/networkInterfaces/*

Microsoft.Network/networkSecurityGroups/*

Microsoft.Network/virtualNetworks/join/action

Microsoft.Network/virtualNetworks/subnets/join/action

Microsoft.Network/publicIPAddresses/join/action

Microsoft.Network/publicIPAddresses/read

Microsoft.Network/publicIPAddresses/write

Microsoft.Network/routeTables/*

[IMADHA]

Hello Thomas,

thanks for your reply

i confirm that, i remark that he dont send detach command in the logs and i dont know why?

2022-06-29 17:41:54.307 +0200 vm_ha_state_trans INFO: : Sending detach command for NIC : None

and he get error 404 when he try to put the URL

2022-06-29 17:41:54.338 +0200 vm_ha_state_trans INFO: : URL for put request: https://management.azure.com/None?api-version=2019-11-01

2022-06-29 17:41:54.455 +0200 vm_ha_state_trans INFO: : Put Request Failed: 404

and i dont know where he brings this link, if you have an idea, may be its by default used by the version of the plugin

thank you

[SathyaK]

We are seeing the same issue and there is no clue on why would the Firewall make call to NIC: None.  Did you happen to find a solution for this issue?

[SathyaK]

Floating IP attach/detachment issues in Azure HA environment af... - Knowledge Base - Palo Alto Netw... ..  this helped, it was the sequence.  Had to turn off one firewall, then rebooted the one that has Secondary-IP Created to solve the error.