M9006 IRF跨框流量异常

两台M9006做堆叠旁挂  核心所有流量引到M9K，再通过子接口路由形式实现核心下不同VRF之间的流量访问

问题：防火墙IRF主备形式，但是业务有时候出现不通，关闭备机到核心的接口后恢复（故障期间dis sess table ipv4没有会话）

track 1 interface Ten-GigabitEthernet1/2/0/1 physical # track 2 interface Blade1/3/0/1 physical # track 3 interface Blade1/3/0/2 physical # track 11 interface Ten-GigabitEthernet2/2/0/1 physical # track 12 interface Blade2/3/0/1 physical # track 13 interface Blade2/3/0/2 physical

irf-port 1/1

 port group interface Ten-GigabitEthernet1/2/0/31 mode enhanced

 port group interface Ten-GigabitEthernet1/2/0/32 mode enhanced #

 irf-port 2/2 port group interface Ten-GigabitEthernet2/2/0/31 mode enhanced

 port group interface Ten-GigabitEthernet2/2/0/32 mode enhanced

interface Reth1 

 description TO_SERVER_HX

 member interface Ten-GigabitEthernet1/2/0/1 priority 200 

 member interface Ten-GigabitEthernet2/2/0/1 priority 100 # 

interface Reth1.107 

 ip address 10.160.255.174 255.255.255.252 

 vlan-type dot1q vid 107

。。。

redundancy group aaa 

 member interface Reth1

 member failover group group1

 node 1 

 bind chassis 1 priority 100 

 track 1 interface Ten-GigabitEthernet1/2/0/1

 track 2 interface Blade1/3/0/1

 track 3 interface Blade1/3/0/2 

 node 2 

 bind chassis 2 priority 50

 track 11 interface Ten-GigabitEthernet2/2/0/1

 track 12 interface Blade2/3/0/1

 track 13 interface Blade2/3/0/2

session statistics enable 

 session synchronization enable 

 session synchronization dns http 

 session state-machine mode loose 

 session log flow-begin

 session log flow-end

防火墙已修改成为宽松模式