VRRP FailOver is Not Working

[robori]

Hi!

I have 2 Nokia IP300 with IPSO 3.8.1 (Build 028) running in a VRRP fail over config.
We performed some tests, and the problem is that when the Master interface goes down, the Backup one is not getting the Virtual IP address.
I've compared the configurations with other VRRP Clusters which are OK, and the configuration seems good.

Do you have any tips on how to troubleshoot this ?


Thanks a lot,
Robori

[northlandboy]

So if you increase the priority on the secondary firewall to make it higher than the primary, does it go master?

When you try and failover, and the secondary is still in Backup, who does it say is the master firewall? Check in Voyager -> Monitor -> VRRP -> Interface

Normally the secondary will report the primary IP addresses as the master for each interface. It may report something else if you have got another node in the same network using the same VRID. It may report 0.0.0.0 as master, if it has a Check Point problem - that's the "Enable FW-1 Monitoring" option on the VRRP page. If that is the problem, find out what is causing the problem with cphaprob list