"show system state" command to display Phy information on HA2 port on a 5200 Series firewall displays NO_MATCHES
30140
Created On 10/22/19 04:06 AM - Last Modified 07/27/22 23:43 PM
Symptom
Running show system state filter-pretty sys.s1.ha2.phy on 5200 Series Firewall to get the PHY information of HA2 port displays "sys.s1.ha2.phy: NO_MATCHES".
Environment
- PAN-OS 8.0 and above.
- Palo Alto 5200 Series Firewall.
- Palo Alto 7000 Series Firewall.
Cause
HA2 PHY not displaying the information is a limitation on 5200 Series and 7000 Series.
Resolution
Use the command less cp-log brdagent.log and check Port 25 to get the PHY information. Port 25 refers to the HSCI HA2 port. See the highlighted part of Log displaying vendor, Part, and the status of the Port.
cp brdagent.log 2019-10-03 17:10:40 2019-10-03 17:10:40.001 -0600 Port 25: Down 40Gb/s-full duplex
cp brdagent.log 2019-10-03 17:10:40 2019-10-03 17:10:40.001 -0600 PORT25: board_port_autoneg_enabled -> board_port_autoneg, link: 0, mode: 1
cp brdagent.log 2019-10-03 17:11:40 2019-10-03 17:11:40.644 -0600 Error: gryphon_get_port_info(5200/gryphon_ports.c:1231): Remote fault detected on port 25!
cp brdagent.log 2019-10-03 17:13:22 2019-10-03 17:13:22.156 -0600 Port 25: sysd_obj_lookup for <QSFP> failed !!!
cp brdagent.log 2019-10-03 17:13:22 2019-10-03 17:13:22.156 -0600 Port 25: Empty QSFP+ detected
cp brdagent.log 2019-10-03 17:14:07 2019-10-03 17:14:07.441 -0600 QSFP+ detected on port 25
cp brdagent.log 2019-10-03 17:14:07 vendor 'FINISAR CORP. '; part 'FTL4E1QE1C-A5 '; id 'QSFPP'