HA1 备份链接显示“已关闭”
22579
Created On 04/29/22 17:42 PM - Last Modified 05/31/23 19:33 PM
Symptom
命令 ”全部显示高可用性"显示以下信息：
Firewall > show high-availability all
..
HA1 Backup Control Link Information:
IP Address: x.x.x.x/xx; Gateway: x.x.x.x
MAC Address: xx:xx:xx:xx:xx:xx
Interface: management
Link State: Up; Setting: 1Gb/s-full >>>>> Local link state is UP
***
HA1 Backup Control Link Information:
IP Address: x.x.x.x
MAC Address: xx:xx:xx:xx:xx:xx
Connection down; Reason: Never able to connect to peer >>>> Peer connection link state is DOWNEnvironment
- 帕洛阿尔托 3250 Firewall
- PAN-OS: 9.1.9
- HA （高可用性）已配置。
Cause
文件“ha_agent.log”（更少的 mp-log ha_agent.log ) 提供问题的原因。 这里的IP配置的地址与 Peer 上配置的地址不匹配。
Error: ha_peer_recv_tlv(src/ha_peer.c:4233): Group 1 (HA1-MAIN): HA1 backup ip (x.x.x.x) doesn't match what peer is sending on HA1
Error: ha_peer_recv_tlv(src/ha_peer.c:4250): Group 1 (HA1-MAIN): HA1 backup peer ip (x.x.x.x) doesn't match what peer is sending on HA1
debug: ha_sysd_haX_link_change(src/ha_sysd.c:2328): Seeing HA1-Backup peer link up, waiting hold
HA1-Backup peer link upResolution
配置 HA1 备份IP地址以匹配其他对等方发送的内容。 请参阅附加部分中的文档。