topic cluster question in General Topics

cluster question

Retired Member — Wed, 12 Jun 2013 17:37:11 GMT

Hi,

Device1 Active

Device2 Passive

When a failover happens...it takes about 7-8 timeouts(45 second) : device1 passive device2 active

When a failover happens again it takes about 1 timeout(good time): device1 active device2 passive

Any ideas ?

Thanks.

Re: cluster question

VinceM — Wed, 12 Jun 2013 18:04:29 GMT

Hi,

Same fail-over condition on both device ?

Re: cluster question

Retired Member — Wed, 12 Jun 2013 18:08:48 GMT

Yes sure.both same config.

Re: cluster question

dburns — Wed, 12 Jun 2013 18:09:17 GMT

A bit of a broad question because of the various factors that may be in play. But typically the passive unit will be available very quickly it's a matter of other factors coming over.

If this is a simple L3 setup no dynamic routing you can tail a log that will show you when the Gratuitous ARP is sent out.

On the passive unit use this command via cli.

pa> tail follow yes dp-log pan_dha.log

Suspend the active-

You should see this log-

Jan 1 00:00:16 Send gratuitous ARP

See if this differs between the two firewalls when taking over. Will be a good starting point.

Dominic