03-17-2011 09:54 AM
Hi All;
Thought I'd post this for anyone who has the PA going through a cisco HSRP L2 at the perimeter. Traffic is intermittent between the two firewalls if you leave the passvie device interface to "Auto" instead of "shutdown" in the passive state.
You'll notice if you unplug or turn off the interface on the passive device that the packets are going through correctly otherwise you get an ICMP redirect every other packet (or every 4 in my case).
This produces performance problems but if you set the interface to be shut down if passive it works as expected. SSH and HTTPS sessions might need to be re-established during the fail-over however as I noticed after the change.
Anyway; there it is what.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
