05-10-2022 01:19 AM
Hi Team,
Trust all is well. IN the documents it is only mentioned that the "Auto" link-state makes the convergence faster but it is not mentioned how much faster, for example in the number of seconds. From the guide:
Set the Passive link state to "Auto". Auto setting will bring the interfaces on the passive firewall to UP physical state, the interface will not pass any data traffic. This facilitates faster failover times.
Does anyone have an idea how much faster it becomes by changing the link state from shutdown to auto?
Many thanks in advance.
05-10-2022 02:59 AM
Thank you for the post @Hamid.Saffarzadeh
based on my experience with Passive Link State set to "auto" the convergence is approximately 1 second or less with "shutdown" it is in the range 3 to 5 seconds.
Kind Regards
Pavel
05-12-2022 01:15 AM
Thank you Pavel,
One more question if you don't mind. Do you have any idea How long it takes for BGP to converge at the time of a manual firewall failover?
Regards,
05-12-2022 02:15 AM
Just to agree with @PavelK, for our deployments before initiating test failovers we start a ping -t to an interface that will respond to ping. Then, we initiate the failover - we aim for a single missed ping for "auto"-based failovers and three missed pings for "shutdown"-based failovers.
05-12-2022 06:01 AM
Hello @Hamid.Saffarzadeh
when it comes to BGP convergence during failover, then it is fairly quick. It is approximately 1 second or less.
Kind Regards
Pavel
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
