11-07-2011 01:50 PM
Hello!
I was running some fail-over tests the other night and ran into some issues with my switch's ARP table updating correctly.
I have attached a diagram that shows all of my PA connections into the switch stack.
In a nutshell, I have a switch carved up into a number of different VLAN's, each having their own router interface and IP. I have applied policy based routing to each of the VLANs interfaces that matches any traffic destined for any other VLAN and routes it to the back-end vsys of the PA. When I fail over, the switch ARP table doesn't get updated correctly and inter-VLAN traffic doesn't route through the back-end like it should. As soon as I clear ARP on the switch, it works.
Based on that information, is there anything in the PA config that would prevent GARP from going to the switch on all of the interfaces?
I'm trying to determine if my switch is the issue and not updating like it should.
11-11-2011 08:53 AM
You will need to open a case with support for this issue. What SW version are you running? When you open a case, make sure you mention the use of Aggregate Ethernet interfaces, Policy Based routing, and High Availability.
Steve Krall
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
