Skip to main content
Hirose
New Member
November 10, 2021
Question

Policy route issues in HA cluster

  • November 10, 2021
  • 2 replies
  • 2374 views

Hi.

I am using a policy route in my HA cluster. When I create a new policy route, it works fine. However, when the device is rebooted or system switchover occurs twice, the "diag firewall proute list" check shows two sets of policy route lists with broken priority, and communication breakdown occurs. Can someone please tell me how to solve this?

The only temporary solution is to purge the policy route, reboot both systems, and then create a new policy route.

Is this a bug in policy routes in HA clusters?

    2 replies

    Troubleshooter_73
    Explorer
    November 17, 2021

    Was the configuration of the cluster members 100% in sync. Did you double check by using checksum diags? Sounds like a sync issue for me...

    jintrah_FTNT
    Staff
    Staff
    November 18, 2021

    Hi Hirose,

     

    Well, it may be a sync issue as well as #@Troubleshooter_73 pointed, but I also see a possibility of a corrupt flash on primary where the config would be saved. As you mentioned, issue occurs when the device is rebooted, did the policy route config stay after reboot?

     

    best regards,

    Jin

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT