Knowledge Search


×
 

Conditions to use the 'set nsrp ha-link probe' command

  [KB13356] Show Article Properties


Summary:
Use of the NSRP ha-link probe command when the firewall HA links are directly connected can cause the NSRP cluster to appear as if the HA connection is flapping.
Symptoms:
The following messages were reported in the event log of the master firewall of an NSRP Active/Passive cluster:
2009-01-20 04:02:45 crit  NSRP: HA data channel change to ethernet1/4
2009-01-20 04:02:45 crit  NSRP: HA control channel change to ethernet1/4
2009-01-20 04:02:45 crit  NSRP: HA data channel change to NULL.(disconnected)
2009-01-20 04:02:45 crit  NSRP: HA control channel change to NULL.(disconnected)
Solution:
If the NSRP HA interfaces between the master and backup firewall are directly connected (i.e. not connected through a Layer-2 switch or other Layer-2 device), then do not configure the following command:   set nsrp ha-link probe.
Only use the 'set nsrp ha-link probe' command if the HA links for the cluster members are connected to a layer-2 switch or other layer-2 device. 

For more information, please refer to KB11450.
Related Links: