The Cloud Blade (CB) displays the error "HA Misconfigured" and the Remote Networks are not coming up

The Cloud Blade (CB) displays the error "HA Misconfigured" and the Remote Networks are not coming up

1190
Created On 11/30/22 01:46 AM - Last Modified 02/23/24 00:43 AM


Symptom


  • Service Links are down with "peer_address_unresolved" message.
  • The CloudBlade displays the error "HA Misconfigured"
  • On-Boarding the Remote Network fails with a generic error message "Encountered unhandled error while execution."
Site ******* /1664410474409009196/CN8G9S8Y5S8C has HA Misconfigured, Please rectify Tue Nov 29, 2022, 7:46:55 am 
Execution Request Id=timer.356195e6-5e31-488c-b6e8-1b1cc8cfc544

Site On-Boarding Issue: ********/1664410474409009196/CN8G9S8Y5S8C Tue Nov 29, 2022, 7:42:42 am 
Encountered unhandled error while execution. Please quote this message in case of issues. [request_id=timer.ba2c0317-54b4-457f-9ddb-94cf707d05f7] [stage=BatchApplyStateOnSite]


Environment


  • Prisma SD-WAN
  • Prisma Access Integration CloudBlade (PIC)
  • Prisma SASE


Cause


  • When a new site is being onboarded using Prisma Access SPN, this problem arises when a facility has two internet circuits that require an ECMP bundle and the region is not specified correctly or default value is used.
  • For AggBW deployments, ECMP with AUTO DETECT is utilized by default for the extended site tag rather than the region where the tunnel is really being created.
  • This issue is seen if the appropriate region is not applied on the site extended tag or the dependency tag "prisma_ha_primary" is missing on HA site,


Resolution


  1. Configure "prisma_ha_primary" on HA sites to facilitate ECMP mirroring of RNs, and enable ECMP.
Configuration summary
 
 
  1. Specify the "Compute Region in the ECMP configuration
ECMP
 


Additional Information


Troubleshoot the Integration Process and Standard VPNs



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000kFPECA2&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail