We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda NextGen Firewall X

Control Centre statistic HA sync cannot be processed

  • Type: Knowledgebase
  • Date changed: 5 months ago
Solution #00005173 
 
Scope:
This solution replies to:
- NG Firewall firmware versions 4.2.x, 5.0.x, 5.2.x
- netfence firmware versions 4.2.x

 
Symptoms:

Statistics files cannot be synchronised from Control Centre to its HA partner. The following message is recorded in the file mirrorstat.log:

 

  Error ST-ML-RE0002 mirrorstat(x.x.x.x,ARGS): peer x.x.x.x also in state dirty
  Error ST-ML-OP0010 mirrorstat(x.x.x.x,ARGS)->1: terminating abnormally, manual intervention required

 

 
Solution:

The "mirrorstat" is a script file that is executed on a regular basis in order to process synchronisation of statistics files between CC and its HA partner over an SSH connection.

When the script triggers SSH connection establishment to the MC HA partner, it expects the DSA key fingerprint of the HA partner to be known on the CC. If the fingerprint is not yet known, because an SSH connection between the two systems has never before been established, it cannot be processed any further.

 

 

Execute the following steps to allow for flawless statistics files synchronisation:

 

1) Initiate an SSH connection from CCto its HA partner manually, in order to make the DSA key fingerprint known.  
    At the command line interface on the MC type:

  ssh -lroot <HA partner IP>

 

 

 

 

 

 

 

 

2)  Delete the synchronisation status files in /phion0/dstatm/ on both, the primary and the secondary box. Therefore, type the following at the command line interface:

  rm /phion0/dstatm/syncmsg
  rm /phion0/dstatm/syncstate

 

 

In the "Control" > "Server" tab of the primary box, restart the "dstatm" service.

 

 

Link to This Page:
https://campus.barracuda.com/solution/50160000000IKZSAA4