After upgrade to 11.1-63.9, 12.0-63.13, or 12.1-55.18 secondary node crashes when SYSLOG policies are bound to “appfw global"

After upgrade to 11.1-63.9, 12.0-63.13, or 12.1-55.18 secondary node crashes when SYSLOG policies are bound to “appfw global"

book

Article ID: CTX269411

calendar_today

Updated On:

Description

An issue has been identified where the secondary device in a ADC HA pair enters a state where it continuously reboots (crash loop). The issue occurs under certain conditions when syslog policies are bound to "appfw global".

Resolution

Complete the following steps to workaround this issue:
  1. Remove the HA configuration from Primary node (Node 1). After this step, both the nodes in the HA pair will be in standalone mode.
    • show ha node
    • rm ha node <node-id>
  2. If there are any syslog policies that are bound to “appfw global”, execute this step. On Primary Node, run the following commands
    • unbind appFw global <syslog-policy>
    • bind system global <syslog-policy>
      Note: Unbind all the syslog policies bound to appFw global and bind them to system global. 
      This will ensure that the logs are sent to the external syslog server.
  3. After Step 1, cyclic reboot of Secondary Node(Node2) should stop, as it will be in standalone mode. Once Node 2 comes up (in standalone mode), execute the following commands.
    • unbind appFw global <syslog-policy> 
      Note: Unbind all the syslog policies bound to appFw global
  4. Bring both the nodes back in the HA pair. Add the required HA configuration on Node 1
    • add ha node <node-id> <IP> 
  5. After executing above steps, Node 2 will now be Primary and Node 1 will be Secondary.
Refer to Citrix Documentation for detailed information on troubleshooting upgrade failures: https://docs.citrix.com/en-us/citrix-adc/12-1/upgrade-downgrade-citrix-adc-appliance/troubleshooting.html

Problem Cause

This is known issue NSHELP-21167. 
The issue occurs on a secondary box if there are SYSLOG policies bound to “appfw global”.