Commit failed with error : High-availability ha1-backup interface configuration requires a peer-ip-backup address to be configured(Module: ha_agent)

Commit failed with error : High-availability ha1-backup interface configuration requires a peer-ip-backup address to be configured(Module: ha_agent)

35785
Created On 07/11/20 07:59 AM - Last Modified 07/11/20 09:34 AM


Symptom


Commit error observed in a High-availability setup :

User-added image




 

Environment


  • High-availability setup
  • HA1 backup interface configured 

Cause


  • The issue is seen when the HA1-backup is configured with either management (MGT) or an in-band interface.
  • The "Backup Peer HA1 IP Address" is not configured :
User-added image

Resolution


  • Understanding HA backup links : 
  1. Provide redundancy for the HA1 and the HA2 links. In-band ports can be used for backup links for both HA1 and HA2 connections when dedicated backup links are not available. Consider the following guidelines when configuring backup HA links:
  2. The IP addresses of the primary and backup HA links must not overlap each other.
  3. HA backup links must be on a different subnet from the primary HA links.
  4. HA1-backup and HA2-backup ports must be configured on separate physical ports. The HA1-backup link uses port 28770 and 28260.
  • The issue can be resolved by configuring the missing configuration for "Backup Peer HA1 IP Address", as follows :
User-added image
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000008UmPCAU&lang=en_US%E2%80%A9&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language