Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Abhishek_Kumar1
Collaborator

TCP packet out of state: First packet isn't SYN

Hi -

I have a firewall in cluster with R77.20, one of interface traffic in not working after failover (active to standby)

I checked routing and all configuration, all looks good.

while we capture the traffic its showing

(TCP packet out of state: First packet isn't SYN tcp_flags: PUSH-ACK)

I also try to disable statefull packet inspection from global property.

Please provide us solution for this.

3 Replies
PhoneBoy
Admin
Admin

That suggests the traffic in question isn't getting synced to the other cluster member.

Or that the connection "timed out" and it just happened to do so during the failover.

0 Kudos
Abhishek_Kumar1
Collaborator

When traffic is bpassing through primary firewall every thing is working, when any of the reason if failover heppen and traffic shifted to secondary firewall then one of interface traffic is not working and getting tcp sync error.

0 Kudos
Danny
Champion Champion
Champion

And as a side note: R77.20 is out of support since 2017. You may first want to upgrade to a supported release before disabling stateful inspection.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events