pix arp timeout

[bauer.juergen]

hi netpros,

customer is running a pix behind some loadbalancing facility in ha mode which when failover occurs changes its mac address. no gratious arp is sent.

so pix is not reachable for 4 hours becaude of standard arp time out of the pix.

so my question is, whats a good timeout here. 5 min should not be a problem?

red in this forum that the timeout should not be less than 60s?!

whats your preferred timeout ;-)

thanks in advance.

juergen

[a.alekseev]

Default is good :))

but in your case the timeout should be time acceptable for failover.

If 5 min is ok for you let it be 5 min.

In any case you should monitor CPU load before and after arp timeout modifications.