Filter
Top Products
Nokia Network Voyager for IPSO 4.0 Reference Guide 203
Monitoring the Firewall State
By default, IPSO monitors the state of the firewall and responds appropriately. If a VRRP master
detects that the firewall is not ready to handle traffic or is not functioning properly, the master
fails over to a backup system. If all the firewalls on all the systems in the VRRP group are not
ready to forward traffic, no traffic will be forwarded.
To enable or disable Monitor Firewall state
1. Click VRRP under Configuration > High Availability in the tree view.
2. Click Enabled in the Monitor Firewall State field.
To disable this option, if you have enabled it, click Disabled. The default is Enabled.
3. Click Apply
4. Click Save to make your changes permanent.
Troubleshooting VRRP
This section lists common problems with VRRP configurations. Please consult this section
before contacting Customer Support. For information about contacting Nokia Customer
Support, go to https://support.nokia.com/
You can log information about errors and events to troubleshoot VRRP by enabling traces for
VRRP.
To enable traces for VRRP
1. Click Config on the home page.
2. Click the Routing Options link in the Routing Configuration section.
3. Scroll down the Trace Options section to VRRP and choose an option from the Add Option
drop-down list.
4. Click Reset Routing.
The system restarts the routing subsystem and signals it to reread its configuration. The
option you selected, its name and On/Off radio buttons are displayed on the page.
General Configuration Considerations
If VRRP failover does not occur as expected, verify that the following items are correctly
configured.
All routers of a VRRP group must have the same system times. The simplest way to
synchronize times is to enable NTP on all nodes of the VRRP group. You can also manually
change the time and time zone on each node so that it matches the other nodes. It should
match to within a few seconds.
All routers of a VRRP group must have the same hello interval.