During migration of configuration to a new firewall, Commit error "High-availability ha1 IP information will use interface IP information if port is 'management'. Please remove IP" is displayed

During migration of configuration to a new firewall, Commit error "High-availability ha1 IP information will use interface IP information if port is 'management'. Please remove IP" is displayed

3953
Created On 07/31/24 10:28 AM - Last Modified 11/07/24 22:35 PM


Symptom


  • Configuration is being migrated from one firewall platform to another (such as between PA-3400 series to PA-400 series).
  • The config backup from the source firewall with a dedicated HA interface is loaded to the new target firewall without dedicate HA interface.
  • After loading the configuration Commit error "High-availability ha1 IP information will use interface IP information if port is 'management'. Please remove IP" is displayed.


Environment


  • PaloAlto Firewalls
  • Supported PAN-OS
  • High Availability


Cause


The new Firewall does not have the dedicated HA port.



Resolution


 On Source firewall:

  1. Under HA, change the HA interface as the management interface for control link.
  2. Delete the Vwire configuration if present in Firewall.
  3. Commit the changes and export the running configuration.

On Target firewall:

  1. Load the device state and then load the running configuration, which was exported in the previous step.
  2. Now Firewall will have the Device state configuration and HA configuration of the Running configuration.
  3. Verify the HA configuration and perform the commit.


Additional Information


Migration of configuration between non matching hardware platforms is not supported by TAC. Contact your account team if assistance is needed.



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000sccGCAQ&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language