Why cannot I run commands on the standby firewall


After the active/standby status is set up on the two firewalls, you can run the commands that can be automatically synchronized only on the active firewall, not on the standby firewall.
To manually run these commands on the standby firewall, run the undo hrp auto-sync config command to disable the automatic synchronization function.

Other related questions:
Why are accounting packets received when commands are run on devices
This occurs so that devices can record history commands. To disable this function, run the undo cmd recording-scheme command in the AAA view.

Why cannot IP addresses of 802.1X users be displayed sometimes after the display access-user command is run
Users can access a router after they are successfully authenticated. The router captures ARP packets sent by the users and learns their IP addresses. If the users do not send ARP packets, the router cannot learn or display any IP address.

Reason why commands cannot be configured on the standby firewall
After the hot standby relationship is established between two firewalls, commands that can be automatically backed up cannot be manually configured on the standby firewall. Commands configured on the active firewall are automatically synchronized to the standby firewall. To manually configure commands of this type on the standby firewall, cancel the configured automatic backup function (undo hrp auto-sync config) first.

Why are not commands executed on the active firewall synchronized to the standby firewall
If you disable the automatic configuration synchronization function, the configurations are not synchronized. Besides, not all commands can be synchronized. For example, interface and routing configurations cannot be synchronized. For commands that can be synchronized, see Specifications.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top