Hello! I was running some fail-over tests the other night and ran into some issues with my switch's ARP table updating correctly. I have attached a diagram that shows all of my PA connections into the switch stack. In a nutshell, I have a switch carved up into a number of different VLAN's, each having their own router interface and IP. I have applied policy based routing to each of the VLANs interfaces that matches any traffic destined for any other VLAN and routes it to the back-end vsys of the PA. When I fail over, the switch ARP table doesn't get updated correctly and inter-VLAN traffic doesn't route through the back-end like it should. As soon as I clear ARP on the switch, it works. Based on that information, is there anything in the PA config that would prevent GARP from going to the switch on all of the interfaces? I'm trying to determine if my switch is the issue and not updating like it should.
... View more