topic Re: Unable to Sync Management server in Firewall and Security Management

Unable to Sync Management server

Pramod — Mon, 03 Feb 2020 15:35:05 GMT

Hi Team,

We have a Management HA setup.But unable to sync with secondary MGMT.

Connectivity is fine between the Mgmt servers.

Earlier there was no SIC communication between primary and secondary mgmt server.

After resetting SIC,both were in Sync for some time and then after some time facing the same issue.Getting error failed to initialize CA in Smart Console.

I have checked with command #cpstat ca on both Mgmt servers.It shows zero(0) CA record on primary Mgmt.

After restarting CP services twice it came up but again same error after some time.

Re: Unable to Sync Management server

Daniel_Taney — Mon, 03 Feb 2020 18:58:36 GMT

Have you performed any upgrades to the versions of the Mgmt servers recently?

I've always had weird issues with Management HA after performing major version upgrades. Usually, I have to upgrade the Primary and then rebuild the secondary from scratch. (Standby is a VM in my case, so its not as bad if it were a physical)

At one point, I think TAC told me CPUSE in-place-upgrades of the Secondary Management servers technically wasn't supported and building a new secondary was the supported upgrade path for Management HA. I don't know if that is 100% the case or not, someone can feel free to correct me.

Re: Unable to Sync Management server

nagaraja_cs — Tue, 04 Feb 2020 09:13:09 GMT

Hi Team,

There was no recent up-gradation.

Attached the screenshots for reference.

Re: Unable to Sync Management server

nagaraja_cs — Wed, 05 Feb 2020 06:20:21 GMT

Hi Team,

Any suggestions ?

Re: Unable to Sync Management server

Ofer_Barzvi — Wed, 05 Feb 2020 13:56:30 GMT

Hi Daniel,

Indeed when upgrading from R7x to R80.x, it's required to do clean install of the Secondary Management Server and synchronize the database from the Primary Server, but this isn't required anymore when upgrading from R80.x

Best Regards,

Ofer

Re: Unable to Sync Management server

Daniel_Taney — Wed, 05 Feb 2020 14:23:53 GMT

Thank you for clarifying! That will save me from extra steps in the future.

Re: Unable to Sync Management server

Daniel_Taney — Wed, 05 Feb 2020 14:25:05 GMT

Are these servers on the same Layer 2 LAN? Or does the traffic pass through one, or multiple, Firewall interfaces? If its going through Firewalls, did you check your logs for any unexpected drops?

Re: Unable to Sync Management server

nagaraja_cs — Wed, 05 Feb 2020 15:59:54 GMT

Hi Daniel,

Both the management servers are on the same network.

It will not go through any firewall.

First of all,CA is fluctuating,it goes down and come up automatically.Attached screenshot in my last update.

Re: Unable to Sync Management server

PhoneBoy — Thu, 06 Feb 2020 18:18:25 GMT

Strongly suggest getting the TAC involved here