Restore the Primary Panorama to the Active State
By default, the preemptive capability on Panorama allows the primary Panorama to resume functioning as the active peer as soon as it becomes available. However, if preemption is disabled, the only way to force the primary Panorama to become active after recovering from a failure, a non-functional, or a suspended state, is by suspending the secondary Panorama peer.
Before the active-secondary Panorama goes into a suspended state, it transfers the candidate configuration to the passive Panorama so that all your uncommitted configuration changes are saved and can be accessed on the other peer.
- Suspend Panorama.
- Log in to the Panorama peer that you want to place in a suspended state.
- Select PanoramaHigh Availability, and click the Suspend local Panorama link in the Operational Commands section.
- Verify that the status indicates that the Panorama was
suspended at user request.On the Dashboard, High Availability widget, verify that the Local state is suspended.A failover is triggered when you suspend a peer, and the other Panorama takes over as the active peer.
- Restore the suspended Panorama to a functional state.
- In the PanoramaHigh Availability tab, Operational Commands section, click the Make local Panorama functional link.
- On the Dashboard, High Availability widget, confirm that the Panorama has transitioned to either the active or passive state.
Test Panorama HA Failover
Test Panorama HA Failover To test that your HA configuration works properly, trigger a manual failover and verify that the peer transitions states successfully. Log ...
Verify Failover To test that your HA configuration works properly, trigger a manual failover and verify that the firewalls transition states successfully. Suspend the active ...
Install Updates for Panorama in an HA Configuration
Install Updates for Panorama in an HA Configuration To ensure a seamless failover when you update the Panorama software in a high availability (HA) configuration, ...
Diagnose Panorama Suspended State
Diagnose Panorama Suspended State If Panorama is in a suspended state, check for the following conditions: Serial numbers —Verify that the serial number on each ...
Change the URL Filtering Vendor on HA Panorama
Change the URL Filtering Vendor on HA Panorama In a high availability (HA) deployment, each Panorama peer must be in a non-functional state when you ...
Failover Triggers When a failure occurs on the active Panorama and the passive Panorama takes over the task of managing the firewalls, the event is ...
Recover from Split Brain in Panorama HA Deployments
Recover from Split Brain in Panorama HA Deployments When Panorama is configured in a high availability (HA) setup, the managed firewalls are connected to both ...
Set Up HA on Panorama
Set Up HA on Panorama Review the Panorama HA Prerequisites before performing the following steps: Set up connectivity between the MGT ports on the HA ...
HA Firewall States
HA Firewall States An HA firewall can be in one of the following states: HA Firewall State Occurs In Description Initial A/P or A/A Transient ...