HA Configuration not syncing to backup server

[Patrick M. Hausen]

In that case I have no idea. I have 3 HA pairs configured that way and they all work.

Does the standby have the same port settings for the UI as the primary?

[cdsane]

yes it does

[Patrick M. Hausen]

And the "The backup firewall is not accessible or not configured." message is from the primary?

Because on the secondary it is correct. The secondary does not itself have a backup firewall ...

[cdsane]

Yes i get that error message on the primary

But also wanted to bring to your notice that the primary firewall was active way before but because we want to introduce HA that is why we are adding this secondary backup firewall so it is not a fresh setup all together > But carp configuration was do together for both firewalls can that be an issue ?

[Patrick M. Hausen]

But also wanted to bring to your notice that the primary firewall was active way before but because we want to introduce HA that is why we are adding this secondary backup firewall so it is not a fresh setup all together > But carp configuration was do together for both firewalls can that be an issue ?

To my knowledge - no. What can and will be an issue is if the logical interfaces (LAN, WAN, OPT1, ...) are not created in the 100% identical order on both units.

You need to investigate the links in your broweser's address bar when clicking through the individual interfaces.

For example on one if my clusters the interface named "DMZ" has this link:

https://primary.my.firewall.com/interfaces.php?if=opt2

It is absolutely mandatory that the "opt2" part is identical on both units. This is BTW true for most commercial products, too.

[cdsane]

Well noted