topic Re: FWSM failover issue in Network Security

FWSM failover issue

vinod.rathi — Mon, 11 Mar 2019 11:45:08 GMT

I have configured FWSM as inter chassis Active Active failover.

The failover works just fine only for 10 mins before both context on both units shows active and peer context as failed.

I am not sure what the issue is. The failover and Stateful Vlan are trunked on L2 etherchannel (20 Gig links). I do not see any packet drops on etherchannel physical links, however do see a lot of packet drops on Failover and Stateful VLAN only on FWSM module second 6509 switch.

Any thoughts will be helpful.

Regards

Vinod

Re: FWSM failover issue

didyap — Mon, 14 Jan 2008 20:54:22 GMT

When only FWSM failure occure(Cat6k is still active), secondary FWSM becomes active and secondary Cat6k is stanby. The local switchport where the FWSM is attached (the interal port-channel) will learn the source MAC of the frames, and if you have a trunk to another chassis then that other chassis will also learn the source MAC on the trunk port.

Re: FWSM failover issue

raul-santiago — Tue, 25 Mar 2008 19:49:09 GMT

I have a similar issue.

Primary:

FWSM# sho int vlan 247

Interface Vlan247 "FAILOVER", is up, line protocol is up

Hardware is EtherSVI

Description: LAN/STATE Failover Interface

MAC address 0008.7cba.8140, MTU 1500

IP address 192.168.247.1, subnet mask 255.255.255.0

Traffic Statistics for "FAILOVER":

1641554 packets input, 162941658 bytes

1741771 packets output, 206411320 bytes

634039 packets dropped

Secondary:

FWSM# show int vlan 247

Interface Vlan247 "FAILOVER", is up, line protocol is up

Hardware is EtherSVI

Description: LAN/STATE Failover Interface

MAC address 0008.7cba.a7c0, MTU 1500

IP address 192.168.247.2, subnet mask 255.255.255.0

Traffic Statistics for "FAILOVER":

13922 packets input, 1595410 bytes

11700 packets output, 1265836 bytes

4585 packets dropped

Any vlan is active, only the failover vlan is up (The stateful and failover vlan is the same).

Is normal that the failover vlan has dropped packets???

Re: FWSM failover issue

vinod.rathi — Wed, 26 Mar 2008 20:24:22 GMT

The dropped packets is normal, they are broadcast and multicast packets which is normal. Is your failover up and running or the other module shows failed?