防火墙上启用VRRP,启用VRRP的接口与Comware V7交换机互联,防火墙上通过关闭/打开端口等操作进行VRRP主备倒换测试过程中,防火墙VRRP出现频繁震荡,丢包严重。
%@3820409%Apr 25 21:48:42:584 2016 FW01.PRI01.Shijiazhuang VRRP4/6/VRRP_STATUS_CHANGE:
The status of IPv4 virtual router 2 (configured on Ten-GigabitEthernet1/0/25.1) changed from Master to Backup: VRRP packet received.
%@3820410%Apr 25 21:48:42:584 2016 FW01.PRI01.Shijiazhuang VRRP4/6/VRRP_STATUS_CHANGE:
The status of IPv4 virtual router 3 (configured on Ten-GigabitEthernet1/0/25.2) changed from Master to Backup: VRRP packet received.
%@3820411%Apr 25 21:48:42:584 2016 FW01.PRI01.Shijiazhuang VRRP4/6/VRRP_STATUS_CHANGE:
The status of IPv4 virtual router 4 (configured on Ten-GigabitEthernet1/0/25.3) changed from Master to Backup: VRRP packet received.
%@3820412%Apr 25 21:48:42:585 2016 FW01.PRI01.Shijiazhuang VRRP4/6/VRRP_STATUS_CHANGE:
The status of IPv4 virtual router 5 (configured on Ten-GigabitEthernet1/0/25.4) changed from Master to Backup: VRRP packet received.
%@3820413%Apr 25 21:48:42:585 2016 FW01.PRI01.Shijiazhuang VRRP4/6/VRRP_STATUS_CHANGE:
The status of IPv4 virtual router 6 (configured on Ten-GigabitEthernet1/0/25.5) changed from Master to Backup: VRRP packet received.
%@3820414%Apr 25 21:48:42:585 2016 FW01.PRI01.Shijiazhuang VRRP4/6/VRRP_STATUS_CHANGE:
The status of IPv4 virtual router 7 (configured on Ten-GigabitEthernet1/0/25.6) changed from Master to Backup: VRRP packet received.
%@3820415%Apr 25 21:48:42:585 2016 FW01.PRI01.Shijiazhuang VRRP4/6/VRRP_STATUS_CHANGE:
The status of IPv4 virtual router 8 (configured on Ten-GigabitEthernet1/0/25.8) changed from Master to Backup: VRRP packet received.
%@3820416%Apr 25 21:48:45:324 2016 FW01.PRI01.Shijiazhuang VRRP4/6/VRRP_STATUS_CHANGE:
The status of IPv4 virtual router 2 (configured on Ten-GigabitEthernet1/0/25.1) changed from Backup to Master: Preempt.
%@3820417%Apr 25 21:48:45:334 2016 FW01.PRI01.Shijiazhuang VRRP4/6/VRRP_STATUS_CHANGE:
The status of IPv4 virtual router 3 (configured on Ten-GigabitEthernet1/0/25.2) changed from Backup to Master: Preempt.
%@3820418%Apr 25 21:48:45:334 2016 FW01.PRI01.Shijiazhuang VRRP4/6/VRRP_STATUS_CHANGE:
The status of IPv4 virtual router 4 (configured on Ten-GigabitEthernet1/0/25.3) changed from Backup to Master: Preempt.
Comware V7交换机默认配置下,全局stp协议开启,关闭/打开防火墙端口,会触发交换机接口状态改变,导致交换机上stp状态发生改变,无法正常传输防火墙VRRP心跳报文,导致防火墙VRRP状态震荡,从而引起一段时间内网络丢包严重。
关闭交换机连接防火墙的stp协议,或者将这些接口配置为stp边缘接口。
该案例暂时没有网友评论
✖
案例意见反馈
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作