Skip to main content
Eugene_Sn
New Member
June 15, 2023
Question

Out-of-band management and HA A-P problem

  • June 15, 2023
  • 1 reply
  • 1558 views

Hello,

I experienced this issue with HA A-P cluster and would like to figure out what  exactly I did wrong. 

1. I have 2 FG-100F in A-P cluster with out-of-band management via dedicated mgmt interfaces.

2. I  tried to update them via Fabric management. The outcome is only secondary was updated and cluster becomes out of sync.

3. I removed secondary from cluster and updated primary manually. The cluster still out of sync.

4. I did factory reset for secondary and tried to join secondary to cluster. So I had clear config on secondary.

I put config of ha config block from primary, changing priority value. Set up mgmt interface as dedicated-to-management.

When I issued the commands:

 config ha-mgmt-interfaces

 set   interface "mgmt" 

an error occurred:  node_check_object fail!

I examined both config on primary and secondary and noticed differences : secondary has vdom "root" on mgmt interface, but  primary doesn't. So I backed up config from primary and restore it on secondary. After reboot devices built the cluster but with out of sync error. So I check ha checksum, found differences in application.list, corrected them.

The questions are:

1. Why  did node_check_object fail! error occur and how I can avoid it in the future? 

2. Why after clear update and restoring the same config did differences occur between config? Is it device unit specific problem? 

1 reply

aguerriero
Explorer
June 15, 2023

The management interface is referenced in another configuration. Probably in the DHCP settings. Remove the DHCP server configuration for the mgmt interface and you should be good.

config system dhcp server

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!