Team call issue after Failover

Nischal — Sat, 04 Nov 2023 09:48:14 GMT

We have a dual ISP setup.

Both ISP's terminate on single firewall.

We are doing ebgp with both ISP's and having default route accepted from both.

We advertise our public IP to both Peers and use 1 ip from that subnet as egress IP for all internet traffic.

ECMP enabled and method IP modulo.

When there is a failover we dont see any traffic drop to internal IP or web browing .

However , users are kicked out of team calls and they are not able to hop back for good 2 mins.

Understanding call traffic are sensitive to n/w disturbance/outages.

My expectation , how we can minimize this call drop issue during failover ?

Re: Team call issue after Failover

LAYER_8 — Fri, 01 Dec 2023 02:02:16 GMT

I believe this is a session problem. SIP calls going out other interfaces (I assume 2 different zones on the NGFW? Or are these multiple interfaces/subinterfaces on the same physical port) can't migrate to the other zone/interface because there isn't an existing session. There will be drops...

https://live.paloaltonetworks.com/t5/general-topics/is-it-possible-to-keep-sip-calls-from-dropping-when-failing-over/td-p/196091

topic Team call issue after Failover in Next-Generation Firewall Discussions

Team call issue after Failover

Re: Team call issue after Failover