"HA RESYNC: we are not master" in strongswan.log / XG 17.5.8

Hi mxull 

Is there any impact on the Auxiliary device or in HA performance overall? Or is it simply showing logs and more like a cosmetic thing? I will check with colleagues to see if anyone has seen that in HA cluster.

Hi Jaydeep, 

thank you for your reply.

I just only noticed the messages in the log every secon.

HA looks functional. 

Kind Regards,

Max

Max,

from console, type:

system ha show details

Please share the output

Also from advanced shell:

tail -f /log/msync.log | grep ha

tail -f /log/app.log | grep ha

Show the output.

Thanks

Max,

from console, type:

system ha show details

Please share the output

Also from advanced shell:

tail -f /log/msync.log | grep ha

tail -f /log/app.log | grep ha

Show the output.

Thanks

Did you manage to resolve this issue? 

We are experiencing the exact same thing. HA looks fine, but strongswan.log file is full of 

XG125_XN02_SFOS 17.5.9 MR-9# tail -n 10 strongswan.log
2020-01-09 13:34:15 10[CFG] HA RESYNC: we are not master, requesting RESYNC ourselves
2020-01-09 13:34:15 10[CFG] requesting HA resynchronization
2020-01-09 13:34:15 10[CFG] HA RESYNC: we are not master, requesting RESYNC ourselves
2020-01-09 13:34:15 10[CFG] requesting HA resynchronization
2020-01-09 13:34:15 10[CFG] HA RESYNC: we are not master, requesting RESYNC ourselves
2020-01-09 13:34:15 10[CFG] requesting HA resynchronization
2020-01-09 13:34:15 10[CFG] HA RESYNC: we are not master, requesting RESYNC ourselves
2020-01-09 13:34:15 10[CFG] requesting HA resynchronization
2020-01-09 13:34:15 10[CFG] HA RESYNC: we are not master, requesting RESYNC ourselves
2020-01-09 13:34:15 10[CFG] requesting HA resynchronization

Hi Olivier Rombaut,

I have seen those logs before in one of my case where current appliance was not the configured licensed master and IPsec logs were full of those log entries.

Can you please provide output of this command from advanced shell "nvram get '#'li.master" 

Thanks,

XG125_XN02_SFOS 17.5.9 MR-9# nvram get '#'li.master
YES

Whats rather weird is that the charon process is using high cpu all the time 

PID PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
4077 20 0 1337m 7460 2200 S 42.1 0.2 11060:30 charon

console> system ha show details
HA status : Enabled
Current Appliance Key : C1609ABCXY7MP1F
Peer Appliance Key : C1609AB3V6QRTB6
Current HA state : Primary
Peer HA state : Auxiliary
HA Config Mode : Active-Passive
Load Balancing : Not Applicable
Dedicated Port : Port4
Current Dedicated IP : 10.10.2.41
Peer Dedicated IP : 10.10.2.42
Monitoring Port :
Auxiliary Admin Port : br0
Auxiliary Admin IP : 172.29.3.206
Auxiliary Admin IPv6 :
Peer Admin Port : Port8 (This port will be made as admin port on peer appliance after disable HA)