topic Re: HA sessions synchronization initiated by or to the Active. in General Topics

HA sessions synchronization initiated by or to the Active.

TranceforLife — Fri, 24 Mar 2017 23:40:38 GMT

Hi Guys,

Got a random question regarding the sessions synchronisation when running HA :0 If l understood correctly only the sessions that are not initiated by the Active device will be synchronised to the Passive device. Does it mean that all OSPF, BGP and l believe VPN tunnels will be re-established? So only traversing sessions are synchronised and not interrupted during failover.

Re: HA session synchronization initiated by or to the Active.

BPry — Wed, 22 Mar 2017 16:07:24 GMT

Not positive on the answer but when I do an HA failover the VPN tunnel temporarly goes down and then will re-establish.

Re: HA session synchronization initiated by or to the Active.

TranceforLife — Wed, 22 Mar 2017 16:13:45 GMT

Thanks! l always thought all sessions are floating/synchronised but looks like it is not the case

Re: HA sessions synchronization initiated by or to the Active.

kiwi — Wed, 22 Mar 2017 16:25:21 GMT

Yes that is correct.

https://live.paloaltonetworks.com/t5/Learning-Articles/Why-Does-BGP-Have-to-Be-Reestablished-After-a-Failover/ta-p/54340

Graceful restart can help I think.

Cheers,

-Kiwi.

Re: HA sessions synchronization initiated by or to the Active.

TranceforLife — Wed, 22 Mar 2017 16:31:57 GMT

The sessions are getting reestablished automatically (at least can confirm with BGP and IPSec VPN). Thanks