pix arp timeout
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-09-2007 10:41 AM - edited 03-11-2019 04:08 AM
hi netpros,
customer is running a pix behind some loadbalancing facility in ha mode which when failover occurs changes its mac address. no gratious arp is sent.
so pix is not reachable for 4 hours becaude of standard arp time out of the pix.
so my question is, whats a good timeout here. 5 min should not be a problem?
red in this forum that the timeout should not be less than 60s?!
whats your preferred timeout ;-)
thanks in advance.
juergen
- Labels:
-
NGFW Firewalls
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-09-2007 01:37 PM
Default is good :))
but in your case the timeout should be time acceptable for failover.
If 5 min is ok for you let it be 5 min.
In any case you should monitor CPU load before and after arp timeout modifications.
