topic Re: BFD Dropping During Firewall Failover in General Topics

BFD Dropping During Firewall Failover

LCMember2963 — Thu, 25 May 2017 19:00:24 GMT

Having an issue with BFD. I have BFD configured between the Palo Alto and a couple of routers (BFD Single Hop). When a firewall failover occurs, this causes the BFD peering to drop and come back. I would not anticipate this to happen. This causes a unicast path between multihop BFD peers to drop in turn causing multihop BGP peerings to drop as well.

Re: BFD Dropping During Firewall Failover

TranceforLife — Thu, 25 May 2017 22:33:21 GMT

Looks to me a similar behaviour to the below:

https://live.paloaltonetworks.com/t5/Learning-Articles/Why-Does-BGP-Have-to-Be-Reestablished-After-a-Failover/ta-p/54340

Re: BFD Dropping During Firewall Failover

LCMember2963 — Fri, 26 May 2017 13:18:37 GMT

I saw that document as well, and I agree. I was hoping to find something from Palo about what is synced and what is not, but I haven't been able to find anything.

Re: BFD Dropping During Firewall Failover

Remo — Fri, 26 May 2017 13:53:47 GMT

Here is a document about what is synced and what not in active/active and active/passive clusters:

https://live.paloaltonetworks.com/t5/Tech-Note-Articles/High-Availability-Synchronization/ta-p/61190

Re: BFD Dropping During Firewall Failover

LCMember2963 — Fri, 26 May 2017 13:58:10 GMT

Nice find...however, this is contradictive to the above thread...My firewalls are active/passive. This shows that in active/passive pairs the only thing that isn't synced are ICMP sessions. Doesn't say host sessions aren't synced in A/P pair.

Re: BFD Dropping During Firewall Failover

Remo — Fri, 26 May 2017 14:01:34 GMT

Yes I see, probably a little outdated ...

Re: BFD Dropping During Firewall Failover

LCMember2963 — Fri, 26 May 2017 14:02:23 GMT

However, your post helped me find this.

https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/framemaker/70/pan-os/pan-os/section_5.pdf

Which DOES say host information is not synced. Thank you!