topic Re: HSRP L2 Split Brain in General Topics https://live.paloaltonetworks.com/t5/general-topics/hsrp-l2-split-brain/m-p/37192#M27282 <HTML><HEAD></HEAD><BODY><P>The answer is in the question. </P></BODY></HTML> Thu, 17 Mar 2011 16:55:05 GMT amansour 2011-03-17T16:55:05Z HSRP L2 Split Brain https://live.paloaltonetworks.com/t5/general-topics/hsrp-l2-split-brain/m-p/37191#M27281 <HTML><HEAD></HEAD><BODY><P>Hi All; </P><P></P><P>Thought I'd post this for anyone who has the PA going through a cisco HSRP L2 at the perimeter.&nbsp; Traffic is intermittent between the two firewalls if you leave the passvie device interface to "Auto" instead of "shutdown" in the passive state. </P><P></P><P>You'll notice if you unplug or turn off the interface on the passive device that the packets are going through correctly otherwise you get an ICMP redirect every other packet (or every 4 in my case). </P><P></P><P>This produces performance problems but if you set the interface to be shut down if passive it works as expected.&nbsp; SSH and HTTPS sessions might need to be re-established during the fail-over however as I noticed after the change. </P><P></P><P>Anyway; there it is what. </P></BODY></HTML> Thu, 17 Mar 2011 16:54:34 GMT https://live.paloaltonetworks.com/t5/general-topics/hsrp-l2-split-brain/m-p/37191#M27281 amansour 2011-03-17T16:54:34Z Re: HSRP L2 Split Brain https://live.paloaltonetworks.com/t5/general-topics/hsrp-l2-split-brain/m-p/37192#M27282 <HTML><HEAD></HEAD><BODY><P>The answer is in the question. </P></BODY></HTML> Thu, 17 Mar 2011 16:55:05 GMT https://live.paloaltonetworks.com/t5/general-topics/hsrp-l2-split-brain/m-p/37192#M27282 amansour 2011-03-17T16:55:05Z