This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

High Availability

I am trying to configure high availability on my Sophos XG Firewall Home Edition, but I keep getting a faulty message on my auxiliary device. I followed the instructions in the knowledgebase article 123174, but I am not able to get it to work. It gives the faulty message for both active-active and active-passive.

I have the DMZ setup as a static IP with the IP address as 10.10.2.41 the netmask is 255.255.255.0. For everything else I followed the KB article.

Anyone have any ideas of what might be wrong?

Thanks!

This thread was automatically locked due to age.

Parents

0 thiagopalmeira over 8 years ago

I'm having the exact same problem but cannot find the answer anywhere. Also, the XG firewall DEMANDS a license for the configuration even thought its ACTIVE-PASSIVE. The problem? It DOES NOT validate your license telling you it's "already used in another device" so you cannot even start the configuration on the slave. To workaround that I've set up a TRIAL license on the auxiliary device in order to proceed and had to update firmware by uploading an ISO file.

Now, with everything configured according to the KB 123174 (https://community.sophos.com/kb/en-us/123174) the auxiliary shows as "Faulty" while the Primary shows as "Standalone". The XG firewall logs are stupidly horrible and you can only properly see the live ones via "system ha show logs" but I remember them saying the sync wen ok when I was staring at them during set-up.

The Network used in the Port3 (HA dedicated port) is 10.250.250.0/30. The Admin IP of the primary device is 192.168.0.3 so I'm using 192.168.0.4 for the auxiliary admin. The network on Port1 is 192.168.0.0/23.

I've configured the HA twice, even reseting the slave to Factory Default and trying again. Same results.

Port3 Zonetype:DMZ MAC Address:00:1A:8C:5D:5A:F0 MTU:1500
IPv4 Addr(s): 10.250.250.1/30 Bcast:10.250.250.3

Port1 Zonetype:LAN MAC Address:00:E0:20:11:08:FC MTU:1500
IPv4 Addr(s): 192.168.0.3/23 Bcast:192.168.1.255
IPv6 Addr(s): fe80::2e0:20ff:fe11:8fc/64 (link-local)
Speed:1000Mb/s Full Duplex Auto Negotiation:yes
UP BROADCAST RUNNING MULTICAST
RX State: packets:10399581 bytes:1373505243 (1.2 GiB)
errors:0 dropped:1516 overruns:0 frame:0
TX State: packets:12782019 bytes:11687356218 (10.8 GiB)
errors:0 dropped:0 overruns:0 carrier:0

console> system ha show details
HA status : Enabled
Current Appliance Key : C30006QH2MJB987
Peer Appliance Key : C30044WPFF2VG4E
Current HA state : Standalone
Peer HA state : Fault
HA Config Mode : Active-Passive
Load Balancing : Not Applicable
Dedicated Port : Port3
Current Dedicated IP : 10.250.250.1
Peer Dedicated IP : 10.250.250.2
Monitoring Port : Port1,Port4
Auxiliary Admin Port : Port1
Auxiliary Admin IP : 192.168.0.4
Auxiliary Admin IPv6 :

XG310_WP01_SFOS 16.01.2# csc custom status

=====
Tue Feb 7 10:11:18 2017
Listerner is in UNFREEZED STATE
Freeze INIT wait val : 10
Freeze wait val : 120
Opcode queue len : 50
Service queue len: 50
Freeze INIT timeout : Not effective Freeze timeout : Not effective
HANDLE_STATE_CHANGE OPCODE RUNNING(2) ?:- 0
HA is enabled. HA stattus: HA_STAND

Free Workers:
836
832
837
841
845
842
835
844
831
838
840
833
846
847
839
834

Busy service:

XG310_WP01_SFOS 16.01.2#

XG310_WP01_SFOS 16.01.2# grep 'ha' /log/msync.log
Mon Feb 6 18:51:28 2017:072088:29362:INIT:INIT:INFO:vrrp.c:1051 start handle_stat_change 1
Mon Feb 6 18:51:32 2017:480053:29362:INIT:GTM:DEBUG:vrrp.c:1180 opcode: handle_stat_change INIT:GTM
Mon Feb 6 18:51:36 2017:871994:29362:GTM:STAND:DEBUG:vrrp.c:1180 opcode: handle_stat_change GTM:STAND
Mon Feb 6 18:52:31 2017:884196:29365:STAND:MAST:DEBUG:sync_entity.c:528 cmd /bin/syncfile /tmp/peer_lic_ha
Mon Feb 6 18:52:31 2017:884959:29361:STAND:MAST:DEBUG:sync_entity.c:904sesid:16: file /tmp/peer_lic_ha
Mon Feb 6 18:52:31 2017:885615:29361:STAND:MAST:DEBUG:sync.c:827sesid:16:/tmp/peer_lic_ha
Mon Feb 6 18:52:31 2017:885627:29361:STAND:MAST:DEBUG:sync.c:809sesid:16 /tmp/peer_lic_ha 3
Mon Feb 6 18:52:31 2017:949104:29365:STAND:MAST:DEBUG:sync_entity.c:528 cmd /bin/rm -r -f /tmp/peer_lic_ha
Mon Feb 6 18:53:27 2017:446063:29362:STAND:MAST:DEBUG:vrrp.c:1180 opcode: handle_stat_change STAND:MAST
Mon Feb 6 18:53:27 2017:846521:29361:STAND:MAST:DEBUG:sync_entity.c:931sesid:31: cmd /scripts/ha/managetimeropcodes.sh
Mon Feb 6 18:53:27 2017:893942:29361:STAND:MAST:DEBUG:sync.c:827sesid:31:/scripts/ha/managetimeropcodes.sh
Mon Feb 6 18:53:27 2017:893986:29361:STAND:MAST:DEBUG:sync.c:809sesid:31 /scripts/ha/managetimeropcodes.sh 3
Mon Feb 6 18:53:29 2017:491989:29362:MAST:STAND:DEBUG:vrrp.c:1180 opcode: handle_stat_change MAST:STAND
Mon Feb 6 20:31:37 2017:020087:12515:INIT:INIT:INFO:vrrp.c:1051 start handle_stat_change 1
Mon Feb 6 20:31:41 2017:404043:12515:INIT:GTM:DEBUG:vrrp.c:1180 opcode: handle_stat_change INIT:GTM
Mon Feb 6 20:31:45 2017:811987:12515:GTM:STAND:DEBUG:vrrp.c:1180 opcode: handle_stat_change GTM:STAND
Mon Feb 6 20:32:40 2017:549991:12519:STAND:MAST:DEBUG:sync_entity.c:528 cmd /bin/syncfile /tmp/peer_lic_ha
Mon Feb 6 20:32:40 2017:550746:12514:STAND:MAST:DEBUG:sync_entity.c:904sesid:16: file /tmp/peer_lic_ha
Mon Feb 6 20:32:40 2017:551653:12514:STAND:MAST:DEBUG:sync.c:827sesid:16:/tmp/peer_lic_ha
Mon Feb 6 20:32:40 2017:551665:12514:STAND:MAST:DEBUG:sync.c:809sesid:16 /tmp/peer_lic_ha 3
Mon Feb 6 20:32:40 2017:615641:12519:STAND:MAST:DEBUG:sync_entity.c:528 cmd /bin/rm -r -f /tmp/peer_lic_ha
Mon Feb 6 20:33:30 2017:261989:12515:STAND:MAST:DEBUG:vrrp.c:1180 opcode: handle_stat_change STAND:MAST
Mon Feb 6 20:33:30 2017:367751:12514:STAND:MAST:DEBUG:sync_entity.c:931sesid:21: cmd /scripts/ha/managetimeropcodes.sh
Mon Feb 6 20:33:30 2017:460877:12514:STAND:MAST:DEBUG:sync_entity.c:931sesid:22: cmd /scripts/ha/managetimeropcodes.sh
Mon Feb 6 20:33:30 2017:537114:12514:STAND:MAST:DEBUG:sync.c:827sesid:22:/scripts/ha/managetimeropcodes.sh
Mon Feb 6 20:33:30 2017:537149:12514:STAND:MAST:DEBUG:sync.c:809sesid:22 /scripts/ha/managetimeropcodes.sh 3
Mon Feb 6 20:33:30 2017:942792:12514:STAND:MAST:DEBUG:sync_entity.c:931sesid:32: cmd /scripts/ha/managetimeropcodes.sh
Mon Feb 6 20:33:31 2017:012705:12514:STAND:MAST:DEBUG:sync.c:827sesid:32:/scripts/ha/managetimeropcodes.sh
Mon Feb 6 20:33:31 2017:012741:12514:STAND:MAST:DEBUG:sync.c:809sesid:32 /scripts/ha/managetimeropcodes.sh 3
Mon Feb 6 20:33:31 2017:996794:12514:MAST:STAND:DEBUG:sync.c:827sesid:21:/scripts/ha/managetimeropcodes.sh
Mon Feb 6 20:33:31 2017:996829:12514:MAST:STAND:DEBUG:sync.c:809sesid:21 /scripts/ha/managetimeropcodes.sh 3
Mon Feb 6 20:33:32 2017:171968:12515:MAST:STAND:DEBUG:vrrp.c:1180 opcode: handle_stat_change MAST:STAND
Mon Feb 6 20:44:59 2017:879029:989:INIT:INIT:INFO:vrrp.c:1051 start handle_stat_change 1
Mon Feb 6 20:45:04 2017:230968:989:INIT:GTM:DEBUG:vrrp.c:1180 opcode: handle_stat_change INIT:GTM
Mon Feb 6 20:45:08 2017:762917:989:GTM:STAND:DEBUG:vrrp.c:1180 opcode: handle_stat_change GTM:STAND

XG310_WP01_SFOS 16.01.2# grep 'ha' /log/msync.log
Mon Feb 6 18:51:28 2017:072088:29362:INIT:INIT:INFO:vrrp.c:1051 start handle_stat_change 1
Mon Feb 6 18:51:32 2017:480053:29362:INIT:GTM:DEBUG:vrrp.c:1180 opcode: handle_stat_change INIT:GTM
Mon Feb 6 18:51:36 2017:871994:29362:GTM:STAND:DEBUG:vrrp.c:1180 opcode: handle_stat_change GTM:STAND
Mon Feb 6 18:52:31 2017:884196:29365:STAND:MAST:DEBUG:sync_entity.c:528 cmd /bin/syncfile /tmp/peer_lic_ha
Mon Feb 6 18:52:31 2017:884959:29361:STAND:MAST:DEBUG:sync_entity.c:904sesid:16: file /tmp/peer_lic_ha
Mon Feb 6 18:52:31 2017:885615:29361:STAND:MAST:DEBUG:sync.c:827sesid:16:/tmp/peer_lic_ha
Mon Feb 6 18:52:31 2017:885627:29361:STAND:MAST:DEBUG:sync.c:809sesid:16 /tmp/peer_lic_ha 3
Mon Feb 6 18:52:31 2017:949104:29365:STAND:MAST:DEBUG:sync_entity.c:528 cmd /bin/rm -r -f /tmp/peer_lic_ha
Mon Feb 6 18:53:27 2017:446063:29362:STAND:MAST:DEBUG:vrrp.c:1180 opcode: handle_stat_change STAND:MAST
Mon Feb 6 18:53:27 2017:846521:29361:STAND:MAST:DEBUG:sync_entity.c:931sesid:31: cmd /scripts/ha/managetimeropcodes.sh
Mon Feb 6 18:53:27 2017:893942:29361:STAND:MAST:DEBUG:sync.c:827sesid:31:/scripts/ha/managetimeropcodes.sh
Mon Feb 6 18:53:27 2017:893986:29361:STAND:MAST:DEBUG:sync.c:809sesid:31 /scripts/ha/managetimeropcodes.sh 3
Mon Feb 6 18:53:29 2017:491989:29362:MAST:STAND:DEBUG:vrrp.c:1180 opcode: handle_stat_change MAST:STAND
Mon Feb 6 20:31:37 2017:020087:12515:INIT:INIT:INFO:vrrp.c:1051 start handle_stat_change 1
Mon Feb 6 20:31:41 2017:404043:12515:INIT:GTM:DEBUG:vrrp.c:1180 opcode: handle_stat_change INIT:GTM
Mon Feb 6 20:31:45 2017:811987:12515:GTM:STAND:DEBUG:vrrp.c:1180 opcode: handle_stat_change GTM:STAND
Mon Feb 6 20:32:40 2017:549991:12519:STAND:MAST:DEBUG:sync_entity.c:528 cmd /bin/syncfile /tmp/peer_lic_ha
Mon Feb 6 20:32:40 2017:550746:12514:STAND:MAST:DEBUG:sync_entity.c:904sesid:16: file /tmp/peer_lic_ha
Mon Feb 6 20:32:40 2017:551653:12514:STAND:MAST:DEBUG:sync.c:827sesid:16:/tmp/peer_lic_ha
Mon Feb 6 20:32:40 2017:551665:12514:STAND:MAST:DEBUG:sync.c:809sesid:16 /tmp/peer_lic_ha 3
Mon Feb 6 20:32:40 2017:615641:12519:STAND:MAST:DEBUG:sync_entity.c:528 cmd /bin/rm -r -f /tmp/peer_lic_ha
Mon Feb 6 20:33:30 2017:261989:12515:STAND:MAST:DEBUG:vrrp.c:1180 opcode: handle_stat_change STAND:MAST
Mon Feb 6 20:33:30 2017:367751:12514:STAND:MAST:DEBUG:sync_entity.c:931sesid:21: cmd /scripts/ha/managetimeropcodes.sh
Mon Feb 6 20:33:30 2017:460877:12514:STAND:MAST:DEBUG:sync_entity.c:931sesid:22: cmd /scripts/ha/managetimeropcodes.sh
Mon Feb 6 20:33:30 2017:537114:12514:STAND:MAST:DEBUG:sync.c:827sesid:22:/scripts/ha/managetimeropcodes.sh
Mon Feb 6 20:33:30 2017:537149:12514:STAND:MAST:DEBUG:sync.c:809sesid:22 /scripts/ha/managetimeropcodes.sh 3
Mon Feb 6 20:33:30 2017:942792:12514:STAND:MAST:DEBUG:sync_entity.c:931sesid:32: cmd /scripts/ha/managetimeropcodes.sh
Mon Feb 6 20:33:31 2017:012705:12514:STAND:MAST:DEBUG:sync.c:827sesid:32:/scripts/ha/managetimeropcodes.sh
Mon Feb 6 20:33:31 2017:012741:12514:STAND:MAST:DEBUG:sync.c:809sesid:32 /scripts/ha/managetimeropcodes.sh 3
Mon Feb 6 20:33:31 2017:996794:12514:MAST:STAND:DEBUG:sync.c:827sesid:21:/scripts/ha/managetimeropcodes.sh
Mon Feb 6 20:33:31 2017:996829:12514:MAST:STAND:DEBUG:sync.c:809sesid:21 /scripts/ha/managetimeropcodes.sh 3
Mon Feb 6 20:33:32 2017:171968:12515:MAST:STAND:DEBUG:vrrp.c:1180 opcode: handle_stat_change MAST:STAND
Mon Feb 6 20:44:59 2017:879029:989:INIT:INIT:INFO:vrrp.c:1051 start handle_stat_change 1
Mon Feb 6 20:45:04 2017:230968:989:INIT:GTM:DEBUG:vrrp.c:1180 opcode: handle_stat_change INIT:GTM
Mon Feb 6 20:45:08 2017:762917:989:GTM:STAND:DEBUG:vrrp.c:1180 opcode: handle_stat_change GTM:STAND
XG310_WP01_SFOS 16.01.2# grep 'ha:' /log/applog.log
Feb 06 17:32:09 enableha: enableha called from GUI
Feb 06 17:32:09 enableha: dedicated interface is down !!!
Feb 06 17:49:25 enableha: enableha called from GUI
Feb 06 17:49:25 enableha: version mismatch(XG310_WP01_16.01.2.222!=XG310_WP01_16.01.1.202), so can't proceed !!!
Feb 06 17:53:07 enableha: enableha called from GUI
Feb 06 17:53:08 enableha: version mismatch(XG310_WP01_16.01.2.222!=XG310_WP01_16.01.1.202), so can't proceed !!!
Feb 06 18:51:27 enableha: enableha called from GUI
Feb 06 18:51:27 enableha: peer Port4 is found down, but going ahead... !!!
Feb 06 18:51:27 ha: fwm:allowha successfully done
Feb 06 18:51:32 ha: handle_stat_change: 0:5 [ NA=0 AUX=1 STAND=2 PRIM=3 FAULT=4 READY=5 GOTO_PRIM=6 ]
Feb 06 18:51:32 ha: handle_stat_change: no state transition required
Feb 06 18:51:33 ha: fwm:enableha successfully done
Feb 06 18:51:33 ha: going to start tracking the devices
Mon Feb 6 18:51:33 BRST 2017 ha: trackdevice.sh: start tracking the device done
Feb 06 18:51:33 enableha: enableha on peer done
Feb 06 18:51:33 enableha: HA is enabled now.
Feb 06 18:51:36 ha: handle_stat_change: 5:2 [ NA=0 AUX=1 STAND=2 PRIM=3 FAULT=4 READY=5 GOTO_PRIM=6 ]
Feb 06 18:51:36 ha: handle_stat_change: g_ha_hsc=1 is set.
Feb 06 18:51:36 ha: g_ha_transmode=1 [ CONFIG=1 INIT=2 EVENT=0 ]
Feb 06 18:51:36 ha: start tracking the device
Feb 06 18:51:37 ha: fwm:disablearpha successfully done
Feb 06 18:51:37 ha: ctsyncd started
Feb 06 18:51:37 ha: ctsyncd commited
Feb 06 18:51:37 ha: ctsyncd external cache flushed
Feb 06 18:51:37 ha: msync:applyha: stop tracking the monitoring interfaces
Feb 06 18:51:37 ha: msync:applyha: virtual macs are assigned
Feb 06 18:51:37 ha: msync:applyha: going to start tracking the monitoring interfaces
Mon Feb 6 18:51:37 BRST 2017 ha: trackdevicewait.sh: device sleeping
Feb 06 18:51:39 ha: Restart DHCP / PPP client on event of enable ha
Feb 06 18:51:39 ha: networkd:dynaiface_client_start called
Feb 06 18:51:39 ha: msync:applyha: network part done
Feb 06 18:51:39 ha: fwm:applyha successfully done
Feb 06 18:51:39 ha: msync:garpha: send_arp 192.168.2.1 00:E0:20:11:08:FD 192.168.2.255 ff:ff:ff:ff:ff:ff Port4.2
Feb 06 18:51:39 ha: msync:garpha: send_arp 192.168.3.1 00:E0:20:11:08:FD 192.168.3.255 ff:ff:ff:ff:ff:ff Port4.3
Feb 06 18:51:39 ha: msync:garpha: send_arp 192.168.22.1 00:E0:20:11:08:FD 192.168.22.255 ff:ff:ff:ff:ff:ff Port4.6
Feb 06 18:51:39 ha: msync:garpha: send_arp 192.168.7.1 00:E0:20:11:08:FD 192.168.7.255 ff:ff:ff:ff:ff:ff Port4.7
Feb 06 18:51:39 ha: fwm:enablearpha successfully done
Feb 06 18:51:39 ha: Applying peermac Now
Feb 06 18:51:39 ha: virtualhost's arping to gateway
Feb 06 18:51:39 ha: mail sent successfully
Feb 06 18:51:40 ha: handle_stat_change: peer is rebooting.
Feb 06 18:51:40 ha: handle_stat_change: 5:2 done.
Feb 06 18:51:40 ha: handle_stat_change: g_ha_hsc=0 is set.
Mon Feb 6 18:51:47 BRST 2017 ha: trackdevicewait.sh: device sleeping over
Mon Feb 6 18:51:47 BRST 2017 ha: trackdevicewait.sh: start tracking the device done
Feb 06 18:52:01 enableha: enableha called from GUI
Feb 06 18:52:01 enableha: HA is already enabled !!!
Feb 06 18:53:28 ha: handle_stat_change: 2:3 [ NA=0 AUX=1 STAND=2 PRIM=3 FAULT=4 READY=5 GOTO_PRIM=6 ]
Feb 06 18:53:28 ha: handle_stat_change: g_ha_hsc=1 is set.
Feb 06 18:53:28 ha: g_ha_transmode=0 [ CONFIG=1 INIT=2 EVENT=0 ]
Feb 06 18:53:28 ha: start tracking the device
Feb 06 18:53:28 ha: fwm:disablearpha successfully done
Feb 06 18:53:28 ha: msync:applyha: no network changes reqd
Feb 06 18:53:28 ha: fwm:applyha successfully done
Feb 06 18:53:28 ha: fwm:enablearpha successfully done
Feb 06 18:53:29 ha: mail sent successfully
Feb 06 18:53:29 ha: handle_stat_change: 2:3 done.
Feb 06 18:53:29 ha: handle_stat_change: g_ha_hsc=0 is set.
Feb 06 18:53:29 ha: handle_stat_change: 3:2 [ NA=0 AUX=1 STAND=2 PRIM=3 FAULT=4 READY=5 GOTO_PRIM=6 ]
Feb 06 18:53:29 ha: handle_stat_change: g_ha_hsc=1 is set.
Feb 06 18:53:29 ha: g_ha_transmode=0 [ CONFIG=1 INIT=2 EVENT=0 ]
Feb 06 18:53:29 ha: start tracking the device
Feb 06 18:53:29 ha: fwm:disablearpha successfully done
Feb 06 18:53:29 ha: ctsyncd commited
Feb 06 18:53:29 ha: ctsyncd external cache flushed
Feb 06 18:53:29 ha: msync:applyha: prim->stand, so no network changes reqd
Feb 06 18:53:29 ha: fwm:applyha successfully done
Feb 06 18:53:29 ha: msync:garpha: send_arp 192.168.2.1 00:E0:20:11:08:FD 192.168.2.255 ff:ff:ff:ff:ff:ff Port4.2
Feb 06 18:53:29 ha: msync:garpha: send_arp 192.168.3.1 00:E0:20:11:08:FD 192.168.3.255 ff:ff:ff:ff:ff:ff Port4.3
Feb 06 18:53:29 ha: msync:garpha: send_arp 192.168.22.1 00:E0:20:11:08:FD 192.168.22.255 ff:ff:ff:ff:ff:ff Port4.6
Feb 06 18:53:29 ha: msync:garpha: send_arp 192.168.7.1 00:E0:20:11:08:FD 192.168.7.255 ff:ff:ff:ff:ff:ff Port4.7
Feb 06 18:53:30 ha: fwm:enablearpha successfully done
Feb 06 18:53:30 ha: mail sent successfully
Feb 06 18:53:30 ha: handle_stat_change: 3:2 done.
Feb 06 18:53:30 ha: handle_stat_change: g_ha_hsc=0 is set.
Feb 06 19:00:16 disableha: disableha called from GUI
Feb 06 19:00:19 ha: msync:disableha: original macs are assigned
Feb 06 19:00:22 ha: msync:disableha: send_arp 192.168.0.3 00:1A:8C:5D:5A:EE 192.168.1.255 ff:ff:ff:ff:ff:ff Port1
Feb 06 19:00:22 ha: msync:disableha: send_arp 200.189.108.70 00:1A:8C:5D:5A:EF 200.189.108.71 ff:ff:ff:ff:ff:ff Port2
Feb 06 19:00:22 ha: msync:disableha: send_arp 172.16.0.250 00:1A:8C:5D:5A:EF 172.16.0.255 ff:ff:ff:ff:ff:ff Port2:0
Feb 06 19:00:22 ha: msync:disableha: send_arp 10.250.250.1 00:1A:8C:5D:5A:F0 10.250.250.3 ff:ff:ff:ff:ff:ff Port3
Feb 06 19:00:22 ha: msync:disableha: send_arp 172.16.16.16 00:1A:8C:5D:5A:F1 172.16.16.255 ff:ff:ff:ff:ff:ff Port4
Feb 06 19:00:22 ha: msync:disableha: send_arp 192.168.2.1 00:1A:8C:5D:5A:F1 192.168.2.255 ff:ff:ff:ff:ff:ff Port4.2
Feb 06 19:00:22 ha: msync:disableha: send_arp 192.168.3.1 00:1A:8C:5D:5A:F1 192.168.3.255 ff:ff:ff:ff:ff:ff Port4.3
Feb 06 19:00:22 ha: msync:disableha: send_arp 192.168.22.1 00:1A:8C:5D:5A:F1 192.168.22.255 ff:ff:ff:ff:ff:ff Port4.6
Feb 06 19:00:22 ha: msync:disableha: send_arp 192.168.7.1 00:1A:8C:5D:5A:F1 192.168.7.255 ff:ff:ff:ff:ff:ff Port4.7
Feb 06 19:00:22 ha: msync:disableha: send_arp 179.184.169.28 00:1A:8C:5D:4C:DB 179.184.169.31 ff:ff:ff:ff:ff:ff Port8
Feb 06 19:00:22 ha: Restart DHCP / PPP client on event of enable ha
Feb 06 19:00:22 ha: networkd:dynaiface_client_start called
Feb 06 19:00:22 ha: msync:disableha: network part done
Feb 06 19:00:22 ha: fwm:disableha successfully done
Feb 06 19:00:22 ha: mail sent successfully
Feb 06 19:00:22 disableha: disableha done
Feb 06 20:31:36 enableha: enableha called from GUI
Feb 06 20:31:36 enableha: peer Port1 is found down, but going ahead... !!!
Feb 06 20:31:36 ha: fwm:allowha successfully done
Feb 06 20:31:41 ha: handle_stat_change: 0:5 [ NA=0 AUX=1 STAND=2 PRIM=3 FAULT=4 READY=5 GOTO_PRIM=6 ]
Feb 06 20:31:41 ha: handle_stat_change: no state transition required
Feb 06 20:31:42 ha: fwm:enableha successfully done
Feb 06 20:31:42 ha: going to start tracking the devices
Mon Feb 6 20:31:42 BRST 2017 ha: trackdevice.sh: start tracking the device done
Feb 06 20:31:42 enableha: enableha on peer done
Feb 06 20:31:42 enableha: HA is enabled now.
Feb 06 20:31:45 ha: handle_stat_change: 5:2 [ NA=0 AUX=1 STAND=2 PRIM=3 FAULT=4 READY=5 GOTO_PRIM=6 ]
Feb 06 20:31:45 ha: handle_stat_change: g_ha_hsc=1 is set.
Feb 06 20:31:45 ha: g_ha_transmode=1 [ CONFIG=1 INIT=2 EVENT=0 ]
Feb 06 20:31:45 ha: start tracking the device
Feb 06 20:31:45 ha: fwm:disablearpha successfully done
Feb 06 20:31:45 ha: ctsyncd started
Feb 06 20:31:46 ha: ctsyncd commited
Feb 06 20:31:46 ha: ctsyncd external cache flushed
Feb 06 20:31:46 ha: msync:applyha: stop tracking the monitoring interfaces
Feb 06 20:31:46 ha: msync:applyha: virtual macs are assigned
Feb 06 20:31:46 ha: msync:applyha: going to start tracking the monitoring interfaces
Mon Feb 6 20:31:46 BRST 2017 ha: trackdevicewait.sh: device sleeping
Feb 06 20:31:48 ha: Restart DHCP / PPP client on event of enable ha
Feb 06 20:31:48 ha: networkd:dynaiface_client_start called
Feb 06 20:31:48 ha: msync:applyha: network part done
Feb 06 20:31:48 ha: fwm:applyha successfully done
Feb 06 20:31:48 ha: msync:garpha: send_arp 192.168.2.1 00:E0:20:11:08:FD 192.168.2.255 ff:ff:ff:ff:ff:ff Port4.2
Feb 06 20:31:48 ha: msync:garpha: send_arp 192.168.3.1 00:E0:20:11:08:FD 192.168.3.255 ff:ff:ff:ff:ff:ff Port4.3
Feb 06 20:31:48 ha: msync:garpha: send_arp 192.168.22.1 00:E0:20:11:08:FD 192.168.22.255 ff:ff:ff:ff:ff:ff Port4.6
Feb 06 20:31:48 ha: msync:garpha: send_arp 192.168.7.1 00:E0:20:11:08:FD 192.168.7.255 ff:ff:ff:ff:ff:ff Port4.7
Feb 06 20:31:48 ha: fwm:enablearpha successfully done
Feb 06 20:31:48 ha: Applying peermac Now
Feb 06 20:31:48 ha: virtualhost's arping to gateway
Feb 06 20:31:48 ha: mail sent successfully
Feb 06 20:31:48 ha: handle_stat_change: peer is rebooting.
Feb 06 20:31:48 ha: handle_stat_change: 5:2 done.
Feb 06 20:31:48 ha: handle_stat_change: g_ha_hsc=0 is set.
Mon Feb 6 20:31:56 BRST 2017 ha: trackdevicewait.sh: device sleeping over
Mon Feb 6 20:31:56 BRST 2017 ha: trackdevicewait.sh: start tracking the device done
Feb 06 20:33:30 ha: handle_stat_change: 2:3 [ NA=0 AUX=1 STAND=2 PRIM=3 FAULT=4 READY=5 GOTO_PRIM=6 ]
Feb 06 20:33:30 ha: handle_stat_change: g_ha_hsc=1 is set.
Feb 06 20:33:30 ha: g_ha_transmode=0 [ CONFIG=1 INIT=2 EVENT=0 ]
Feb 06 20:33:30 ha: start tracking the device
Feb 06 20:33:31 ha: fwm:disablearpha successfully done
Feb 06 20:33:31 ha: msync:applyha: no network changes reqd
Feb 06 20:33:31 ha: fwm:applyha successfully done
Feb 06 20:33:31 ha: fwm:enablearpha successfully done
Feb 06 20:33:31 ha: mail sent successfully
Feb 06 20:33:31 ha: handle_stat_change: 2:3 done.
Feb 06 20:33:31 ha: handle_stat_change: g_ha_hsc=0 is set.
Feb 06 20:33:32 ha: handle_stat_change: 3:2 [ NA=0 AUX=1 STAND=2 PRIM=3 FAULT=4 READY=5 GOTO_PRIM=6 ]
Feb 06 20:33:32 ha: handle_stat_change: g_ha_hsc=1 is set.
Feb 06 20:33:32 ha: g_ha_transmode=0 [ CONFIG=1 INIT=2 EVENT=0 ]
Feb 06 20:33:32 ha: start tracking the device
Feb 06 20:33:32 ha: fwm:disablearpha successfully done
Feb 06 20:33:32 ha: ctsyncd commited
Feb 06 20:33:32 ha: ctsyncd external cache flushed
Feb 06 20:33:32 ha: msync:applyha: prim->stand, so no network changes reqd
Feb 06 20:33:32 ha: fwm:applyha successfully done
Feb 06 20:33:32 ha: msync:garpha: send_arp 192.168.2.1 00:E0:20:11:08:FD 192.168.2.255 ff:ff:ff:ff:ff:ff Port4.2
Feb 06 20:33:32 ha: msync:garpha: send_arp 192.168.3.1 00:E0:20:11:08:FD 192.168.3.255 ff:ff:ff:ff:ff:ff Port4.3
Feb 06 20:33:32 ha: msync:garpha: send_arp 192.168.22.1 00:E0:20:11:08:FD 192.168.22.255 ff:ff:ff:ff:ff:ff Port4.6
Feb 06 20:33:32 ha: msync:garpha: send_arp 192.168.7.1 00:E0:20:11:08:FD 192.168.7.255 ff:ff:ff:ff:ff:ff Port4.7
Feb 06 20:33:32 ha: fwm:enablearpha successfully done
Feb 06 20:33:33 ha: mail sent successfully
Feb 06 20:33:33 ha: handle_stat_change: 3:2 done.
Feb 06 20:33:33 ha: handle_stat_change: g_ha_hsc=0 is set.
Feb 06 20:44:58 ha: Booting up in XG310_WP01_SFOS 16.01.2
Feb 06 20:44:58 ha: msync: before_start: lspci Port1 Port10 Port2 Port3 Port4 Port5 Port6 Port7 Port8 Port9
Feb 06 20:44:58 ha: msync: before_start: Port3 is static interface
Feb 06 20:45:04 ha: handle_stat_change: 0:5 [ NA=0 AUX=1 STAND=2 PRIM=3 FAULT=4 READY=5 GOTO_PRIM=6 ]
Feb 06 20:45:04 ha: handle_stat_change: g_ha_hsc=1 is set.
Feb 06 20:45:04 ha: handle_stat_change: 0:5 done.
Feb 06 20:45:04 ha: handle_stat_change: g_ha_hsc=0 is set.
Feb 06 20:45:08 ha: handle_stat_change: 5:2 [ NA=0 AUX=1 STAND=2 PRIM=3 FAULT=4 READY=5 GOTO_PRIM=6 ]
Feb 06 20:45:08 ha: handle_stat_change: g_ha_hsc=1 is set.
Feb 06 20:45:08 ha: g_ha_transmode=2 [ CONFIG=1 INIT=2 EVENT=0 ]
Feb 06 20:45:08 ha: starting system services
Feb 06 20:45:26 ha: ctsyncd started
Mon Feb 6 20:45:51 BRST 2017 ha: poststartupwait.sh: init sleeping
Mon Feb 6 20:46:01 BRST 2017 ha: poststartupwait.sh: init sleeping over
Feb 06 20:46:01 ha: msync:garpha: send_arp 192.168.2.1 00:E0:20:11:08:FD 192.168.2.255 ff:ff:ff:ff:ff:ff Port4.2
Feb 06 20:46:01 ha: msync:garpha: send_arp 192.168.3.1 00:E0:20:11:08:FD 192.168.3.255 ff:ff:ff:ff:ff:ff Port4.3
Feb 06 20:46:01 ha: msync:garpha: send_arp 192.168.22.1 00:E0:20:11:08:FD 192.168.22.255 ff:ff:ff:ff:ff:ff Port4.6
Feb 06 20:46:01 ha: msync:garpha: send_arp 192.168.7.1 00:E0:20:11:08:FD 192.168.7.255 ff:ff:ff:ff:ff:ff Port4.7
Mon Feb 6 20:46:02 BRST 2017 ha: trackdevice.sh: start tracking the device done
Feb 06 20:46:02 ha: mail sent successfully
Feb 06 20:46:02 ha: initcomp: 5:2 done.
Feb 06 20:46:02 ha: initcomp: g_ha_hsc=0 is set.
Mon Feb 6 20:46:02 BRST 2017 ha: poststartupwait.sh: init state transition done
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 8 years ago in reply to thiagopalmeira

Thiago,

As soon you are using an hw appliance with paid license, open a ticket with support and share with us the result.

Please open a new thread.

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 thiagopalmeira over 8 years ago in reply to lferrara

I've already done that; waiting for Sophos to reply.
Cancel
Vote Up 0 Vote Down

Cancel
0 thiagopalmeira over 8 years ago in reply to lferrara

Ferrara,

Just reporting the cause of the issue: one of the monitored ports had no connection.

One of the "Monitored Ports" of the auxiliary device had a 0 RX value due to a bad ethernet cable connected to the port.

Port4     Link encap:Ethernet HWaddr 00:1A:8C:5D:41:E3
          inet addr:172.16.16.16 Bcast:172.16.16.255 Mask:255.255.255.0
          UP BROADCAST MULTICAST MTU:1500 Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
          Memory:f7800000-f787ffff

After changing the cable the HA went up as Primary-Auxiliary as normal.

Regards,
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 thiagopalmeira over 8 years ago in reply to lferrara

Ferrara,

Just reporting the cause of the issue: one of the monitored ports had no connection.

One of the "Monitored Ports" of the auxiliary device had a 0 RX value due to a bad ethernet cable connected to the port.

Port4     Link encap:Ethernet HWaddr 00:1A:8C:5D:41:E3
          inet addr:172.16.16.16 Bcast:172.16.16.255 Mask:255.255.255.0
          UP BROADCAST MULTICAST MTU:1500 Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
          Memory:f7800000-f787ffff

After changing the cable the HA went up as Primary-Auxiliary as normal.

Regards,
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data