Salesforce

How to Recover HA Pair Member from the Suspended State

« Go Back

Information

 
TitleHow to Recover HA Pair Member from the Suspended State
URL NameHow-to-Recover-HA-Pair-Membe-58261
Summary
Validation StatusValidated - External
Publication StatusPublished
Symptom
Environment
Cause
When running in High Availability (HA) configuration, one of the firewall of the HA pair can go into the suspend state:
  • When an administrator manual suspends a device into  maintenance.
  • The device move into suspended due to preemption loop or non-functional loop.
Refer: When does an HA node go into Suspended state due to Non-Functional loop?
When does an HA node go into Suspended state due to Preemption loop ?


When in suspended state, the device no longer participates in high-availability election process.
In suspended state, communications still happen between the firewalls in the HA pair and this is not the same as disabling HA.
Resolution

Before making the node functional, consider the following recommendations :

  • Investigate and the fix the issue of the interface and/or path monitoring flaps.
  • If the node is made functional in an unstable environment, it will likely move into a suspended state again. 
  • Remove the preempt option from the nodes until the monitoring status is stable.
  • This will help the healthy node retain the Active state, while the node encountering flaps will remain in the non-functional/passive state for investigation.

To make the suspended device participate in High Availability again, use the below methods.

CLI:

> request high-availability state functional

Web-GUI:

Navigate to Device -> High Availability -> Operational Commands ->Make local device functional

make-device-functional
 

 

Additional Information
Legacy ID58261
Legacy Urlhttp://live.paloaltonetworks.com:80/t5/Management-Articles/How-to-Recover-HA-Pair-Member-from-the-Suspended-State/ta-p/58261
Auto Assistant Signature

Powered by