HA1-Backup link shows Down on the HA widget but up on the CLI
10184
Created On 01/09/23 21:53 PM - Last Modified 10/25/23 20:37 PM
Symptom
- HA1-Backup link shows Down on the High-Availability widget in the web GUI: Dashboard > High Availability widget
- On the CLI, the HA interface shows as "up". In this example, interface 1/4 is configured as the HA1-Backup link.
admin@FW-A(active)> show interface all
name id speed/duplex/state mac address
---------------------------------------------------------------------------
ethernet1/4 19 10000/full/up 7c:89:c3:1d:27:13
name id vsys zone forwarding tag address
---------------- ----- ---- ---------- ------------------- ------ ------------------
ethernet1/4 19 1 ha 0 192.168.1.1/30
- "show high-availability all" CLI command reports interface "Up" as well
admin@FW-A(active)> show high-availability all
!!!
HA1 Backup Control Link Information:
IP Address: 192.168.1.1/30
MAC Address: 7c:89:c3:1d:27:13
Interface: ethernet1/4
Link State: Up; Setting: 10Gb/s-full
!!!
Environment
- Palo Alto Networks Firewalls configured in High-Availability.
- Supported PAN-OS.
- HA1-Backup link configured.
Cause
The backup Peer HA1 IP address is wrongly configured on the GUI Device > High Availability configuration.
Resolution
- Configure the correct Backup Peer HA1 IP address in both High Availability devices:
- Commit the configuration.
Additional Information
23 May 23 (Vijay) - Article updated with Adnan and published external.