How to Troubleshoot High Availability(HA) on ION Devices in Prisma SDWAN?

How to Troubleshoot High Availability(HA) on ION Devices in Prisma SDWAN?

8664
Created On 02/02/23 00:06 AM - Last Modified 01/22/24 07:00 AM


Objective


  1. Validate the HA configuration on UI and Elements
  2. FIx the HA issue if there is a configuration issue


Environment


  • Prisma SD-WAN
  • Prisma SASE
  • ION


Procedure


  1. Double-check all HA configurations on the active and backup devices on the UI.

HA
  1. The ION device will synchronize with the configuration on the UI.
xxxxx-HQ-NEW# dump spoke-ha config
Name                    : xxxxx
Enable                  : true
Cluster ID              : 1674592256246012745
Description             :
Advertisement Interval  : 5
Preempt                 : true
Interface               : controller 1
Group ID                : 133
Base Priority           : 180
Track Interface         : 13    reduce 50
  1. The ION with the highest priority takes the following active role:
DEU04569-HQ-NEW# dump spoke-ha status
Active                  : true
Peer Connected          : true
Base Priority           : 180
Effective Priority      : 180
Updated                 : 2023-01-28 06:50:56.871 (112h52m59s ago)
DEU04569-HQ-NEW#
  1. If the "Peer Connected" cannot be recognized, use the ping command to ensure that the interface used to exchange the HA heartbeat information is reachable.
 
xxxx-HQ-NEW# ping controller1 10.40.143.85
PING 10.40.143.85 (10.40.143.85) from 10.40.143.84: 56 data bytes
64 bytes from 10.40.143.85: seq=0 ttl=64 time=0.318 ms
64 bytes from 10.40.143.85: seq=1 ttl=64 time=0.363 ms
  1. ION logs HA information on ham logs; review logs to obtain a better understanding of the HA issue.
xxxx-HQ-NEW# file tailf log ham
{"_ts":"2023-01-30T04:08:37.532Z","_level":"info","_pid":14298,"_msgid":"peer connection","_prog":"xfer","_fac":"ham","state":"ActiveConnected","event":"device changed","old":"eth0","new":"eth0"}
{"_ts":"2023-01-30T07:08:36.276Z","_level":"info","_pid":14298,"_msgid":"peer connection","_prog":"xfer","_fac":"ham","state":"ActiveConnected","event":"device changed","old":"eth0","new":"eth0"}
{"_ts":"2023-01-30T10:08:35.569Z","_level":"info","_pid":14298,"_msgid":"peer connection","_prog":"xfer","_fac":"ham","state":"ActiveConnected","event":"device changed","old":"eth0","new":"eth0"}
{"_ts":"2023-01-31T07:08:34.965Z","_level":"info","_pid":14298,"_msgid":"peer connection","_prog":"xfer","_fac":"ham","state":"ActiveConnected","event":"device changed","old":"eth0","new":"eth0"}
{"

 


Additional Information


For more information, refer to the link : Configure Branch HA

Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000kGlVCAU&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language