11-08-2017 04:57 AM
There are two PA-500 firewalls in High Availability state A\P
After failover process the passive device become active but didnt pass the traffic.One possible reason which i suppose to be is the Gratious Arp packets are not send to the port of switch (cisco 3850) which is connected to passive device
because when we type show mac-address interface <<number>> there are no virtual mac address
are there any other possible suggestions?
11-13-2017 03:40 PM
Did you happen to capture the GradARP packets on the passive device as it became active?
11-14-2017 01:11 AM
if you force the Grat ARP, does it show up on your switch?
> test arp gratuitous interface
ethernet1/1 ethernet1/1
ethernet1/2 ethernet1/2
ethernet1/3 ethernet1/3
11-14-2017 05:56 AM
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
