we have configured Layer 7 tracker for zscaler and tracker keep flapping and timeout--- when you trace it no latency ---please find the vdebug logs and tunnel tracker status-- is this any bug if yes what is the fix for this or any workaround ...
dhl-sd-tw001-01# show tracker interface
VPN INTERFACE STATUS RTT
---------------------------------
0 ge2_0 UP -
0 ge2_3.804 UP -
0 ipsec11 UP Timeout >>>>>>>>>>>>>>>>
0 ipsec12 UP 170
0 ipsec21 UP 451
0 ipsec22 UP 444
Nov 1 05:35:50 dhl-sd-tw001-01 VTRACKER[4617]: %Viptela-dhl-sd-tw001-01-vtracker-5-NTCE-1400002: Notification: tracker-state-change severity-level:major host-name:"dhl-sd-tw001-01" system-ip:100.100.28.15 vpn-id:0 attach-point-name:"ipsec11" tracker-name:"l7_tracker_ap_pri" new-state:up
Nov 1 05:38:21 dhl-sd-tw001-01 VTRACKER[4617]: %Viptela-dhl-sd-tw001-01-vtracker-5-NTCE-1400002: Notification: tracker-state-change severity-level:major host-name:"dhl-sd-tw001-01" system-ip:100.100.28.15 vpn-id:0 attach-point-name:"ipsec11" tracker-name:"l7_tracker_ap_pri" new-state:down
Nov 1 05:41:20 dhl-sd-tw001-01 VTRACKER[4617]: %Viptela-dhl-sd-tw001-01-vtracker-5-NTCE-1400002: Notification: tracker-state-change severity-level:major host-name:"dhl-sd-tw001-01" system-ip:100.100.28.15 vpn-id:0 attach-point-name:"ipsec11" tracker-name:"l7_tracker_ap_pri" new-state:up
Nov 1 05:43:21 dhl-sd-tw001-01 VTRACKER[4617]: %Viptela-dhl-sd-tw001-01-vtracker-5-NTCE-1400002: Notification: tracker-state-change severity-level:major host-name:"dhl-sd-tw001-01" system-ip:100.100.28.15 vpn-id:0 attach-point-name:"ipsec11" tracker-name:"l7_tracker_ap_pri" new-state:down
Nov 1 05:45:50 dhl-sd-tw001-01 VTRACKER[4617]: %Viptela-dhl-sd-tw001-01-vtracker-5-NTCE-1400002: Notification: tracker-state-change severity-level:major host-name:"dhl-sd-tw001-01" system-ip:100.100.28.15 vpn-id:0 attach-point-name:"ipsec11" tracker-name:"l7_tracker_ap_pri" new-state:up
Nov 1 05:48:21 dhl-sd-tw001-01 VTRACKER[4617]: %Viptela-dhl-sd-tw001-01-vtracker-5-NTCE-1400002: Notification: tracker-state-change severity-level:major host-name:"dhl-sd-tw001-01" system-ip:100.100.28.15 vpn-id:0 attach-point-name:"ipsec11" tracker-name:"l7_tracker_ap_pri" new-state:down
Nov 1 05:50:50 dhl-sd-tw001-01 VTRACKER[4617]: %Viptela-dhl-sd-tw001-01-vtracker-5-NTCE-1400002: Notification: tracker-state-change severity-level:major host-name:"dhl-sd-tw001-01" system-ip:100.100.28.15 vpn-id:0 attach-point-name:"ipsec11" tracker-name:"l7_tracker_ap_pri" new-state:up
Nov 1 05:52:51 dhl-sd-tw001-01 VTRACKER[4617]: %Viptela-dhl-sd-tw001-01-vtracker-5-NTCE-1400002: Notification: tracker-state-change severity-level:major host-name:"dhl-sd-tw001-01" system-ip:100.100.28.15 vpn-id:0 attach-point-name:"ipsec11" tracker-name:"l7_tracker_ap_pri" new-state:down
Nov 1 05:59:50 dhl-sd-tw001-01 VTRACKER[4617]: %Viptela-dhl-sd-tw001-01-vtracker-5-NTCE-1400002: Notification: tracker-state-change severity-level:major host-name:"dhl-sd-tw001-01" system-ip:100.100.28.15 vpn-id:0 attach-point-name:"ipsec11" tracker-name:"l7_tracker_ap_pri" new-state:up
Nov 1 06:03:21 dhl-sd-tw001-01 VTRACKER[4617]: %Viptela-dhl-sd-tw001-01-vtracker-5-NTCE-1400002: Notification: tracker-state-change severity-level:major host-name:"dhl-sd-tw001-01" system-ip:100.100.28.15 vpn-id:0 attach-point-name:"ipsec11" tracker-name:"l7_tracker_ap_pri" new-state:down
------------------------------------------------------
Nov 1 02:37:45 dhl-sd-tw001-01 FTMD[4517]: bfdmgr_session_update_state[1142]: record with discriminator 1785 invalid
Nov 1 02:41:37 dhl-sd-tw001-01 VTRACKER[4617]: tracker_dns_resolved_addr_cb[1354]: DNS Resolver, Clear the stale entries ge2_0, tr: nat-dia-tracker-1
Nov 1 02:47:00 dhl-sd-tw001-01 FTMD[4517]: ftm_if_add_by_confd[3857]: Destination ip set for if: ipsec11, not triggering ZIA FSM
Nov 1 02:47:29 dhl-sd-tw001-01 FTMD[4517]: ftm_if_add_by_confd[3857]: Destination ip set for if: ipsec11, not triggering ZIA FSM
Nov 1 03:06:10 dhl-sd-tw001-01 FTMD[4517]: bfdmgr_session_update_state[1142]: record with discriminator 3185 invalid
Nov 1 03:06:11 dhl-sd-tw001-01 FTMD[4517]: bfdmgr_session_update_state[1142]: record with discriminator 6998 invalid
Nov 1 03:16:30 dhl-sd-tw001-01 FTMD[4517]: ftm_if_add_by_confd[3857]: Destination ip set for if: ipsec11, not triggering ZIA FSM
Nov 1 03:17:30 dhl-sd-tw001-01 FTMD[4517]: ftm_if_add_by_confd[3857]: Destination ip set for if: ipsec11, not triggering ZIA FSM
Nov 1 03:35:00 dhl-sd-tw001-01 FTMD[4517]: ftm_if_add_by_confd[3857]: Destination ip set for if: ipsec11, not triggering ZIA FSM
Nov 1 03:35:30 dhl-sd-tw001-01 FTMD[4517]: ftm_if_add_by_confd[3857]: Destination ip set for if: ipsec11, not triggering ZIA FSM
Nov 1 03:41:00 dhl-sd-tw001-01 FTMD[4517]: ftm_if_add_by_confd[3857]: Destination ip set for if: ipsec11, not triggering ZIA FSM
Nov 1 03:41:30 dhl-sd-tw001-01 FTMD[4517]: ftm_if_add_by_confd[3857]: Destination ip set for if: ipsec11, not triggering ZIA FSM
Nov 1 03:46:30 dhl-sd-tw001-01 FTMD[4517]: ftm_if_add_by_confd[3857]: Destination ip set for if: ipsec11, not triggering ZIA FSM
Nov 1 03:47:30 dhl-sd-tw001-01 FTMD[4517]: ftm_if_add_by_confd[3857]: Destination ip set for if: ipsec11, not triggering ZIA FSM
Nov 1 04:05:30 dhl-sd-tw001-01 FTMD[4517]: ftm_if_add_by_confd[3857]: Destination ip set for if: ipsec11, not triggering ZIA FSM
Nov 1 04:06:00 dhl-sd-tw001-01 FTMD[4517]: ftm_if_add_by_confd[3857]: Destination ip set for if: ipsec11, not triggering ZIA FSM
Nov 1 04:08:30 dhl-sd-tw001-01 FTMD[4517]: ftm_if_add_by_confd[3857]: Destination ip set for if: ipsec11, not triggering ZIA FSM
Nov 1 04:11:00 dhl-sd-tw001-01 FTMD[4517]: ftm_if_add_by_confd[3857]: Destination ip set for if: ipsec11, not triggering ZIA FSM
Nov 1 04:29:00 dhl-sd-tw001-01 FTMD[4517]: ftm_if_add_by_confd[3857]: Destination ip set for if: ipsec11, not triggering ZIA FSM
Nov 1 04:29:30 dhl-sd-tw001-01 FTMD[4517]: ftm_if_add_by_confd[3857]: Destination ip set for if: ipsec11, not triggering ZIA FSM
Nov 1 04:35:00 dhl-sd-tw001-01 FTMD[4517]: ftm_if_add_by_confd[3857]: Destination ip set for if: ipsec11, not triggering ZIA FSM
Nov 1 04:35:30 dhl-sd-tw001-01 FTMD[4517]: ftm_if_add_by_confd[3857]: Destination ip set for if: ipsec11, not triggering ZIA FSM
Nov 1 04:58:31 dhl-sd-tw001-01 FTMD[4517]: ftm_if_add_by_confd[3857]: Destination ip set for if: ipsec11, not triggering ZIA FSM
Nov 1 04:59:00 dhl-sd-tw001-01 FTMD[4517]: ftm_if_add_by_confd[3857]: Destination ip set for if: ipsec11, not triggering ZIA FSM
Nov 1 05:05:45 dhl-sd-tw001-01 FTMD[4517]: ftm_if_add_by_confd[3857]: Destination ip set for if: ipsec11, not triggering ZIA FSM
Nov 1 05:05:45 dhl-sd-tw001-01 FTMD[4517]: ftm_if_add_by_confd[3857]: Destination ip set for if: ipsec11, not triggering ZIA FSM
Nov 1 05:05:49 dhl-sd-tw001-01 IKED[4523]: iked_update_confd_configure_if_oper[1075]: set tunnel-destination-ip 165.225.102.33 at /vpn/vpn-instance{0}/interface{ipsec11}/tunnel-destination-ip in confd
Nov 1 05:05:49 dhl-sd-tw001-01 FTMD[4517]: ftm_oper_vpn_if[4229]: Tunnel destination IP is getting set
Nov 1 05:05:49 dhl-sd-tw001-01 FTMD[4517]: ftm_oper_vpn_if[4234]: Tunnel destination IP: 165.225.102.33
Nov 1 05:05:49 dhl-sd-tw001-01 FTMD[4517]: ftm_if_add_by_confd[3857]: Destination ip set for if: ipsec11, not triggering ZIA FSM
Nov 1 05:06:28 dhl-sd-tw001-01 FTMD[4517]: ftm_if_add_by_confd[3857]: Destination ip set for if: ipsec12, not triggering ZIA FSM
Nov 1 05:06:28 dhl-sd-tw001-01 FTMD[4517]: ftm_if_add_by_confd[3857]: Destination ip set for if: ipsec12, not triggering ZIA FSM
Nov 1 05:06:32 dhl-sd-tw001-01 IKED[4523]: iked_update_confd_configure_if_oper[1075]: set tunnel-destination-ip 165.225.102.33 at /vpn/vpn-instance{0}/interface{ipsec12}/tunnel-destination-ip in confd
Nov 1 05:06:32 dhl-sd-tw001-01 FTMD[4517]: ftm_oper_vpn_if[4229]: Tunnel destination IP is getting set
Nov 1 05:06:32 dhl-sd-tw001-01 FTMD[4517]: ftm_oper_vpn_if[4234]: Tunnel destination IP: 165.225.102.33
