[AF] AF dual-machine master/slave role negotiation failed, prompt: Function serial number activation status is inconsistent
Problem Description
The customer AF is configured as dual-machine master and backup. When testing the SSL VPN function module, after the configuration is completed, it is found that the dual-machine AF master and backup Passive controller role negotiation is abnormal.

WeChat picture_20190724112707.jpg (1.14 MB)
Process——
In the path of [System] – [System Configuration] – [General Configuration] – [Serial Number], it is found that the host AF has 100 SSL VPN authorizations, and the standby machine lacks SSL VPN authorizations, as follows:
Main device:

433165d387cdc8d7d6.png (2.68 MB)
Equipment:

965115d387cf39d16e.png (2.89 MB)
Root cause
The function serial number authorizations of the primary and backup devices are different.
solution
You need to contact the supplier or local service center to activate the SSL VPN function serial number of the backup machine, and the SSL VPN authorization must be consistent.
Original Link
https://support.sangfor.com.cn/cases/list?product_id=13&type=1&category_id=700&isOpen=true