HA peer stuck in Initial (Waiting for state synchronization completion)

HA peer stuck in Initial (Waiting for state synchronization completion)

26482
Created On 12/29/22 08:47 AM - Last Modified 06/26/23 02:25 AM


Symptom


  • Firewalls in HA setup.
  • On Dashboard--> High Availability, one firewall is Active and the Peer is in Initial (Waiting for state synchronization completion)
HA1.PNG
  • HA2 is down. There is no HA-2 backup configured.


Environment


  • All PanOS firewalls in HA 


Cause


  • Due to HA2 link down, peer is in Initial (Waiting for state synchronization completion)


Resolution


  1. Fix the HA2 connectivity. As soon as HA2 is up, the firewall will change its state from Initial (Waiting for state synchronization completion) to Passive.
 
  1. If physical access to firewall is not available to perform above step, for the time being follow given below steps to bring up peer in Passive state.
i) Uncheck Enable Session Synchronization (Under GUI --> Device --> High Availability --> HA communications --> HA2) on both firewalls and commit the change. 

ii) Make sure to re-enable Enable Session Synchronization once HA2 connectivity is fixed on both firewalls.


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000kFw3CAE&lang=en_US%E2%80%A9&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail