HA2 link down for VM series firewall
24323
Created On 06/19/19 22:03 PM - Last Modified 06/21/19 08:24 AM
Symptom
You have an unexplained issue where the HA2 link remains down for VM series firewall, while other links (HA1 and transit interfaces) work correctly.
The HA2 link may even have been up until a recent upgrade or configuration change.
Environment
any virtual environment
Cause
When basic troubleshooting on the firewall VM has not revealed local issues or mis-configurations to explain the issue; it is important to review and understand hypervisor related options that may affect networking for the VM.
One such option that can be easy to overlooked, is DPDK support.
Resolution
Ensure that DPDK is either disabled or enabled (when meeting the appropriate requirements) for BOTH VM's that share the HA2 link. "Mix and match" can lead to issues such as HA2 link down.
More background and details on DPDK support @ https://docs.paloaltonetworks.com/vm-series/8-0/vm-series-deployment/set-up-a-vm-series-firewall-on-an-esxi-server/performance-tuning-of-the-vm-series-for-esxi/enable-dpdk-on-esxi