<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: HA Active/Active with Floating IP issue (PAN4.0.2) in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/ha-active-active-with-floating-ip-issue-pan4-0-2/m-p/15751#M11512</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;There is currently an issue which is being addressed regarding pings through A/A configuration. Althrough it is not specificly matching what you are experiencing. Can you call into support to debug this issue and get further information which can be helpful to find the root cause of why the other segments were not reachable.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Dominic&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Thu, 12 May 2011 04:14:50 GMT</pubDate>
    <dc:creator>dburns</dc:creator>
    <dc:date>2011-05-12T04:14:50Z</dc:date>
    <item>
      <title>HA Active/Active with Floating IP issue (PAN4.0.2)</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/ha-active-active-with-floating-ip-issue-pan4-0-2/m-p/15750#M11511</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;&lt;SPAN style="line-height: 115%; font-family: &amp;amp;quot;Calibri&amp;amp;quot;,&amp;amp;quot;sans-serif&amp;amp;quot;; font-size: 11pt; mso-fareast-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin; mso-bidi-font-family: &amp;amp;quot;Times New Roman&amp;amp;quot;; mso-bidi-theme-font: minor-bidi; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: AR-SA;"&gt;The configuration is HA Active/Active with the following:&lt;BR /&gt; &lt;SPAN style="mso-spacerun: yes;"&gt; &lt;/SPAN&gt;- “Session Owner Selection” set to primary-device;&lt;BR /&gt; &lt;SPAN style="mso-spacerun: yes;"&gt; &lt;/SPAN&gt;- Floating IP configured on several L3 interfaces, and on each interface the Active-Primary node has lower Floating IP priority (is the preferred node);&lt;BR /&gt; &lt;SPAN style="mso-spacerun: yes;"&gt; &lt;/SPAN&gt;- The Link Monitoring is disabled, however on each Floating IP group ‘Failover on link down’ is enabled;&lt;BR /&gt; &lt;SPAN style="mso-spacerun: yes;"&gt; &lt;/SPAN&gt;- The HA1, HA2 and HA3 interfaces are correctly connected and operational, and the cluster is fully synchronized with no alarms or warnings.&lt;BR /&gt; &lt;BR /&gt; The test setup is as following:&lt;BR /&gt; &lt;SPAN style="mso-spacerun: yes;"&gt; &lt;/SPAN&gt;- my device is connected to one of the segments and during a test I am pinging several other segments reachable through PA Active/Active cluster, as well as the Floating IP address on the segment I am connected to;&lt;BR /&gt; &lt;SPAN style="mso-spacerun: yes;"&gt; &lt;/SPAN&gt;- the test consist of disconnecting the cable that connects the PA Active-Primary device and the network switch, to which my device is connected.&lt;BR /&gt; &lt;BR /&gt; Test results:&lt;BR /&gt; &lt;SPAN style="mso-spacerun: yes;"&gt; &lt;/SPAN&gt;- after disconnecting the cable I lose 2-3 pings to Floating IP address on the segment my device is connected to;&lt;BR /&gt; &lt;SPAN style="mso-spacerun: yes;"&gt; &lt;/SPAN&gt;- the other segments, which are reachable through PA cluster, are do not respond at all (even after over a minute of waiting).&lt;BR /&gt; &lt;BR /&gt; The only dubious thing is that on HA3 interface I can only see transmit TX counters increase and RX counters stay at zero (on both the first and second node of PA cluster).&lt;BR /&gt; Has anyone experienced similar issue when using Floating IP or ARP Load Sharing?&lt;/SPAN&gt;&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Sun, 01 May 2011 09:29:45 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/ha-active-active-with-floating-ip-issue-pan4-0-2/m-p/15750#M11511</guid>
      <dc:creator>darkfibre</dc:creator>
      <dc:date>2011-05-01T09:29:45Z</dc:date>
    </item>
    <item>
      <title>Re: HA Active/Active with Floating IP issue (PAN4.0.2)</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/ha-active-active-with-floating-ip-issue-pan4-0-2/m-p/15751#M11512</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;There is currently an issue which is being addressed regarding pings through A/A configuration. Althrough it is not specificly matching what you are experiencing. Can you call into support to debug this issue and get further information which can be helpful to find the root cause of why the other segments were not reachable.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Dominic&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 12 May 2011 04:14:50 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/ha-active-active-with-floating-ip-issue-pan4-0-2/m-p/15751#M11512</guid>
      <dc:creator>dburns</dc:creator>
      <dc:date>2011-05-12T04:14:50Z</dc:date>
    </item>
  </channel>
</rss>

