Server error: Failed to synchronize running configuration with HA peer; operation not allowed: Version mismatch with Peer for OC
8302
Created On 12/05/22 16:13 PM - Last Modified 03/12/24 03:07 AM
Symptom
- Command show high-availability all shows running configuration not synchronized
- Out-of-sync Reason: Version mismatch with Peer for OC
- When trying to synchronize running config (request high-availability sync-to-remote running-config), it gives error:
Server error: Failed to synchronize running configuration with HA peer; operation not allowed: Version mismatch with Peer for OC
Environment
- Any PAN-OS on 10.1.0 or above.
Cause
- OC Plugin is not matching in both the HA peer.
Resolution
- Open config Plugin(OC ) introduced with PAN-OS version 10.1.0. In one node is on lower than 10.1.0 and another same or higher than 10.1.0, this issue can occur. Upgrade both the HA peer to PAN-OS version 10.1.0 or later to match the OC plugin version.
- If already running on PAN-OS version 10.1.0 or later, perform the below command in CLI:
request plugins check request plugins install openconfig-<latest version>
Additional Information
Note: OC plugin option is visible under device>plugin (GUI), if the firewall is running on PAN-OS version 10.1.0 or later.