topic Re: ClusterXL OSPF in Firewall and Security Management

ClusterXL OSPF

Dmitry_Barantse — Thu, 16 Aug 2018 17:08:43 GMT

Hi Team.

I have a question about OSPF work in HA pair (R80.10).

Do I need configure graceful restart or other special settings for seamless failover?

I tested failover scenario and after I disable current active member with clusterxl admin down new active member stopped forwarding traffic because of lack of routing information

Re: ClusterXL OSPF

PhoneBoy — Fri, 17 Aug 2018 01:30:22 GMT

As far as I know, you do not need Graceful Restart unless you are using VRRP.

With regular ClusterXL, routing information should sync between cluster members.

The router-id should be configured as the Cluster IP, though.

Re: ClusterXL OSPF

_Val_ — Fri, 17 Aug 2018 07:56:39 GMT

It looks like OSPF synchronization is not working for you.

It is done on TCP port 2010. You can start troubleshooting with this SK: How to troubleshoot failovers in ClusterXL - Advanced Guide

Some additional recommendations concerning FW rules you may need to put in place are here: ClusterXL member is "Down" due to Critical device "FIB" Mind this SK is not directly applicable to your case, but the FW rules mentioned there are.

Re: ClusterXL OSPF

vinodsh — Fri, 25 Jun 2021 12:26:21 GMT

If Router-id is not configured as Cluster IP then LSA on peer device are not updated. I could see router LSA with unreachable metric as soon as I changed the router-id to Cluster IP, it is working fine.