topic Re: ECMP not working on Maestro in Hyperscale Firewall (Maestro)

ECMP not working on Maestro

Rohit_Raut — Wed, 07 Oct 2020 12:16:46 GMT

Hi,

As ISP redundancy is not working on R80.30SP, we tried configuring ECMP but it is also not working. Does anyone has any idea about how to perform ISP redundancy on Maestro. We have 2 ISP links. So configured 2 default gateways with priority 1 for both. When we disconnect one of the links, then traffic is not shifted over the other link. It shows network unreachable. 'show route' command displays both the default routes. Also tested with altering the priority, still not working. Below are the details of Setup.

Orchestrator: R80.20SP JHF_295

Maestro gateways: R80.30SP JHF_45

Re: ECMP not working on Maestro

Chris_Atkinson — Wed, 07 Oct 2020 12:25:35 GMT

To confirm are you using ip-reachability with the routes, either ping or bfd?

Otherwise ECMP with BGP might be an option for you.

Re: ECMP not working on Maestro

Rohit_Raut — Wed, 07 Oct 2020 12:30:31 GMT

Hi Chris, We are using ip-reachability with ping. ECMP with BGP will be a difficult task as customer has to perform changes on ISP end.

Re: ECMP not working on Maestro

Chris_Atkinson — Wed, 07 Oct 2020 12:53:08 GMT

Understood, to confirm is this on Maestro configured for VSX ?

(ECMP for static routes on VSX isn't supported currently).

Re: ECMP not working on Maestro

Rohit_Raut — Wed, 07 Oct 2020 12:47:53 GMT

Hi Chris,

We are not using VSX but using Maestro R80.30SP.

Re: ECMP not working on Maestro

Chris_Atkinson — Mon, 19 Oct 2020 08:35:36 GMT

Hi Rohit,

I tested the following just now on a system with R80.20SP JHF T302

set static-route default nexthop gateway address 10.100.1.1 priority 1 on
set static-route default nexthop gateway address 10.100.1.4 priority 1 on
set static-route default ping on

How long did you leave the link disconnected?

Suggest you take this up with TAC to investigate further if sk169632 doesn't apply to your case.

Re: ECMP not working on Maestro

Rohit_Raut — Wed, 07 Oct 2020 15:04:54 GMT

Hi Chris,

Thanks for your reply. Did it work in your environment? Also kindly let us know if you are using Orchestrator with gateways with R80.20SP or you are using 40k/64k appliance with R80.20SP.

To answer your query, we had kept the link disconnected for 10-15 min but no luck. We have raised a case tac and shared logs with them.

Re: ECMP not working on Maestro

Chris_Atkinson — Wed, 07 Oct 2020 15:16:34 GMT

Yes the routing worked, R80.20SP on Maestro with 6500 appliances.

Re: ECMP not working on Maestro

Rohit_Raut — Thu, 08 Oct 2020 06:24:00 GMT

Hi Chris, Thanks for the update. We are having 7000 appliances and it seems that R80.20SP is not supported on 7000 appliances. We have checked installing R80.20SP with bootable USB but it shows driver issue.

Re: ECMP not working on Maestro

Chris_Atkinson — Thu, 08 Oct 2020 06:26:58 GMT

R80.30SP is the correct version for 7000 series appliances per sk162373.

Re: ECMP not working on Maestro

Rohit_Raut — Tue, 20 Oct 2020 09:41:31 GMT

R&D team provided a package(attached below), which resolved the issue.