Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Martin_Peinsipp
Contributor

No proper policy-enforcement after installing jumbo-take 196 on top of jumbo-take 155 (R80.30, VSX)

Hi!

We had a huge problem on a VSX-Cluster (R80.30, jumbo-take 155) after installing jumbo-take 196. After the reboot of the inactive cluster-node (cluster state was fine) we performed a manual failover ("vsx_util vsls") to this fw-node. Right after this, we had a overall taffic-outage because the policy was not enforced correctly. Most traffic was blocked based on the last clean-up-rule.

We did not have enough time time analyze the problem (fw ctl zdebug, we only checked the size of the connection-table, which was very low at this time), so we uninstalled jumbo-take 196 again. After the reboot we had the same problem on both cluster-nodes.

We had to push the policy manualy. Right after this, everything was working fine again.

Befor this procedure the cluster was working fine and we did not have any issues with failover at all.

We are already in contact with the TAC-Team.

Do you have any ideas regarding this strange behaviour?

 

Best regards

 

Martin

0 Kudos
4 Replies
G_W_Albrecht
Legend Legend
Legend

There are other posts already about this issue !

CCSP - CCSE / CCTE / CTPS / CCME / CCSM Elite / SMB Specialist
0 Kudos
Martin_Peinsipp
Contributor

Hi!

Can you share a link, I did not find similar posts.

 

Martin

0 Kudos
Chris_Atkinson
Employee Employee
Employee

0 Kudos
Martin_Peinsipp
Contributor

THX for the link, strange the search did not find anything related to this.

 

BR
Martin

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events