Hi everyone,
today we tried to connect our two XG230 to an active passive HA. First handshake should have worked but sync could not be completed. Error logs on the active device shows:
May 18 18:05:10 HA cannot be configured when Interface Not In Administration Port List.May 18 18:05:10 ha: pollenableha: enableha failed
Webinterface page for HA shows:
The update as described here:
and here:
has not helped.
Sign in to the web admin console of the auxiliary Sophos Firewall from Port A, and go to Network > Interfaces. Make sure the IP address of Port A is in same subnet as Port A of primary Sophos Firewall.
For example, if Port A of the primary node is 192.168.3.254/24, then Port A of the auxiliary node can be 192.168.3.253/24. However, it cannot be 172.16.16.16/24
In this example, we will configure Port A as the peer administration port. So, Port A of the auxiliary node must be in same subnet as Port A of the primary node. If it isn't, Quick HA won't work, and the following error appears in /log/syslog.log on the primary node.
Validation Failed For Ha interface IP.
I would request you to double check this link: Quick HA Setup
