It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda NextGen Firewall X

Control Centre statistic HA sync cannot be processed

  • Type: Knowledgebase
  • Date changed: one year ago
Solution #00005173 
This solution replies to:
- NG Firewall firmware versions 4.2.x, 5.0.x, 5.2.x
- netfence firmware versions 4.2.x


Statistics files cannot be synchronised from Control Centre to its HA partner. The following message is recorded in the file mirrorstat.log:


  Error ST-ML-RE0002 mirrorstat(x.x.x.x,ARGS): peer x.x.x.x also in state dirty
  Error ST-ML-OP0010 mirrorstat(x.x.x.x,ARGS)->1: terminating abnormally, manual intervention required



The "mirrorstat" is a script file that is executed on a regular basis in order to process synchronisation of statistics files between CC and its HA partner over an SSH connection.

When the script triggers SSH connection establishment to the MC HA partner, it expects the DSA key fingerprint of the HA partner to be known on the CC. If the fingerprint is not yet known, because an SSH connection between the two systems has never before been established, it cannot be processed any further.



Execute the following steps to allow for flawless statistics files synchronisation:


1) Initiate an SSH connection from CCto its HA partner manually, in order to make the DSA key fingerprint known.  
    At the command line interface on the MC type:

  ssh -lroot <HA partner IP>









2)  Delete the synchronisation status files in /phion0/dstatm/ on both, the primary and the secondary box. Therefore, type the following at the command line interface:

  rm /phion0/dstatm/syncmsg
  rm /phion0/dstatm/syncstate



In the "Control" > "Server" tab of the primary box, restart the "dstatm" service.



Link to This Page: