Symptom

FPR-2100 Series configure in HA setup. Primary FTD is rebooted in HA setup. Once the Primary FTD comes UP, It will not detect the Secondary FTD in HA and Primary FTD will transition to the ACTIVE state. > show failover history ========================================================================== From State To State Reason ========================================================================== 10:51:45 UTC Jul 2 2023 Not Detected Disabled No Error 10:51:56 UTC Jul 2 2023 Disabled Negotiation Set by the config command 10:52:42 UTC Jul 2 2023 Negotiation Just Active No Active unit found 10:52:42 UTC Jul 2 2023 Just Active Active Drain No Active unit found 10:52:42 UTC Jul 2 2023 Active Drain Active Applying Config No Active unit found 10:52:42 UTC Jul 2 2023 Active Applying Config Active Config Applied No Active unit found 10:52:42 UTC Jul 2 2023 Active Config Applied Active No Active unit found - Reason for the above behaviour : Failover interfaces are yet to come UP. - portmgr.log file can be checked to verify at what time failover interface comes UP. - sample logs : 2023 Jul 02 10:52:36 PMLOG: Informational: Ethernet2/7: admin state changed to up ----> failover link is UP 2023 Jul 02 10:52:37 PMLOG: Alert: Ethernet2/7 link changed to UP --------------------------> failover link is UP - The above logs indicate that interface came UP after the failover process started on the device. - Once the failover interfaces come UP, the secondary detects the Primary in HA and Secondary FTD transitions to Standby Ready state. - Secondary FTD : 10:53:05 UTC Jul 2 2023 Active Cold Standby Failover state check "The time stamp provided above indicates that it occurred after the primary became Active." 10:53:06 UTC Jul 2 2023 Cold Standby App Sync Failover state check 10:59:19 UTC Jul 2 2023 App Sync Sync Config Failover state check 11:00:10 UTC Jul 2 2023 Sync Config Sync File System Failover state check 11:00:10 UTC Jul 2 2023 Sync File System Bulk Sync Failover state check 11:00:22 UTC Jul 2 2023 Bulk Sync Standby Ready Failover state check

Conditions

FPR 2100 units running FTD code 7.0.5 OR 7.2.4 in HA

Workaround

Currently No Workaround available.

Further Problem Description