- NG Firewall firmware versions 4.2.x, 5.0.x, 5.2.x
- netfence firmware versions 4.2.x
Statistics files cannot be synchronised from Control Centre to its HA partner. The following message is recorded in the file mirrorstat.log:
Error ST-ML-RE0002 mirrorstat(x.x.x.x,ARGS): peer x.x.x.x also in state dirty
Error ST-ML-OP0010 mirrorstat(x.x.x.x,ARGS)->1: terminating abnormally, manual intervention required
The "mirrorstat" is a script file that is executed on a regular basis in order to process synchronisation of statistics files between CC and its HA partner over an SSH connection.
When the script triggers SSH connection establishment to the MC HA partner, it expects the DSA key fingerprint of the HA partner to be known on the CC. If the fingerprint is not yet known, because an SSH connection between the two systems has never before been established, it cannot be processed any further.
Execute the following steps to allow for flawless statistics files synchronisation:
1) Initiate an SSH connection from CCto its HA partner manually, in order to make the DSA key fingerprint known.
At the command line interface on the MC type:
ssh -lroot <HA partner IP>
2) Delete the synchronisation status files in /phion0/dstatm/ on both, the primary and the secondary box. Therefore, type the following at the command line interface:
In the "Control" > "Server" tab of the primary box, restart the "dstatm" service.