Good day,
I have recently completed an upgrade from R80.10 to R80.30 (Management + 2 gateways in HA cluster). The upgrade itself was successful but I have noticed one issue on the standby gateway. We cannot ping or do NSlookups etc from the standby node. License checks also fails on this node.
What I have attempted thus far:
- Set the "fw ctl set int fwha_forw_packet_to_not_active 1" on both gateways
- Followed the guidance in sk147093 (fw ctl zdebug output matched that in the SK, as per below, IP sanitised)
121670435;[cpu_1];[SIM-207375815];update_tcp_state: invalid state detected (current state: 0x10000, th_flags=0x10, cdir=0) -> dropping packet, conn: [<1.1.1.1,2022,2.2.2.2,88,6>][PPK0];
@;121670435;[cpu_1];[SIM-207375815];sim_pkt_send_drop_notification: (0,0) received drop, reason: general reason, conn:
It is important to note that all connectivity is restored when I do a fw unloadlocal. There has also been no changes to either NAT or firewall policies.
I've found a couple of posts on Checkmates describing similiar issue, but unfortunately no resolution apart from the steps above.
I will also log a TAC case, but hoping to hear if anyone has experienced similiar issues after an upgrade?
Thanks,
Ruan
