 Re: Timeouts on Nokia cluster failover
Sadly it's been a few years since I did much work with IPSO, but I'm having flashbacks to issues with VRRP and gratuitous ARP.
From memory, the firewall needs to be able to send a gratuitous ARP as the virtual IP. I think we had to ensure that our cluster objects were set up correctly, with all the virtual IPs - we hadn't always had that previously, as cluster configuration was a little different back in the pre-R55 days.
I would try triggering a failover, and use tcpdump to see if a gratuitous ARP is being sent. This SHOULD update all ports, including trunk ports. It is definitely a valid network configuration that you have. |