State synchronization

[jaijtink]

I'v got a problem with two firewalls syncing their statetable. I created a link vlan via a fiber connection to a switch core. Between the two firewalls a ping works fine. The statesync packets are send out the interface but they are not received by the other firewall.

[pworach]

State sync is done using multicast, Cisco switches need no ip igmp snooping configured since they don't always get the multicast group registration message. You can set it on the sync vlan interface or globally.