Who rated this post

cancel
Showing results for 
Search instead for 
Did you mean: 
AmirArama
Employee
Employee

so you might have asymmetry,

the external GW go via the internal GW, and the reply from MGMT going directly to the external GW maybe.

bottom line, topology needs to be examined. run 'tcpdump/fw monitor' on all GWs and mgmt to understand how the traffic flows.

run fw ctl zdebug + drop on all GWs on maintenance window to see if & who drops the traffic. (reset with 'fw ctl debug 0')


consider changing the topology. if not, at least make sure all your connections from/to mgmt routed in symmetric way.

 

View solution in original post

(1)
Who rated this post