topic Gratuitous ARP / HA Problems in General Topics https://live.paloaltonetworks.com/t5/general-topics/gratuitous-arp-ha-problems/m-p/18975#M13821 <HTML><HEAD></HEAD><BODY><P>Hello!</P><P></P><P>I was running some fail-over tests the other night and ran into some issues with my switch's ARP table updating correctly.</P><P></P><P>I have attached a diagram that shows all of my PA connections into the switch stack.</P><P></P><P>In a nutshell, I have a switch carved up into a number of different VLAN's, each having their own router interface and IP.&nbsp; I have applied policy based routing to each of the VLANs interfaces that matches any traffic destined for any other VLAN and routes it to the back-end vsys of the PA.&nbsp; When I fail over, the switch ARP table doesn't get updated correctly and inter-VLAN traffic doesn't route through the back-end like it should.&nbsp; As soon as I clear ARP on the switch, it works.</P><P></P><P>Based on that information, is there anything in the PA config that would prevent GARP from going to the switch on all of the interfaces?</P><P></P><P>I'm trying to determine if my switch is the issue and not updating like it should.</P></BODY></HTML> Mon, 07 Nov 2011 21:50:44 GMT cmaier 2011-11-07T21:50:44Z Gratuitous ARP / HA Problems https://live.paloaltonetworks.com/t5/general-topics/gratuitous-arp-ha-problems/m-p/18975#M13821 <HTML><HEAD></HEAD><BODY><P>Hello!</P><P></P><P>I was running some fail-over tests the other night and ran into some issues with my switch's ARP table updating correctly.</P><P></P><P>I have attached a diagram that shows all of my PA connections into the switch stack.</P><P></P><P>In a nutshell, I have a switch carved up into a number of different VLAN's, each having their own router interface and IP.&nbsp; I have applied policy based routing to each of the VLANs interfaces that matches any traffic destined for any other VLAN and routes it to the back-end vsys of the PA.&nbsp; When I fail over, the switch ARP table doesn't get updated correctly and inter-VLAN traffic doesn't route through the back-end like it should.&nbsp; As soon as I clear ARP on the switch, it works.</P><P></P><P>Based on that information, is there anything in the PA config that would prevent GARP from going to the switch on all of the interfaces?</P><P></P><P>I'm trying to determine if my switch is the issue and not updating like it should.</P></BODY></HTML> Mon, 07 Nov 2011 21:50:44 GMT https://live.paloaltonetworks.com/t5/general-topics/gratuitous-arp-ha-problems/m-p/18975#M13821 cmaier 2011-11-07T21:50:44Z Re: Gratuitous ARP / HA Problems https://live.paloaltonetworks.com/t5/general-topics/gratuitous-arp-ha-problems/m-p/18976#M13822 <HTML><HEAD></HEAD><BODY><P>You will need to open a case with support for this issue. What SW version are you running?&nbsp; When you open a case, make sure you mention the use of Aggregate Ethernet interfaces, Policy Based routing, and High Availability.</P><P></P><P>Steve Krall</P></BODY></HTML> Fri, 11 Nov 2011 16:53:42 GMT https://live.paloaltonetworks.com/t5/general-topics/gratuitous-arp-ha-problems/m-p/18976#M13822 skrall 2011-11-11T16:53:42Z