[c-nsp] FWSM failover time
Tengiz Alaniya
alan.pashi at gmail.com
Mon Jun 15 04:38:17 EDT 2009
Hi all, sorry for my eng ;)
Ok, here is my story about 2 catalyst 6500 boxes, with installed fws
blades. Between fws are configured as transparent with A/A failover. Nodes
are connected with 2x10Tg EC.
When one of boxes filed, initial failover begins, but the time between first
node stops forwarding and the second node begins forwarding is too big,
about ~7 sec.
Any suggestions to how decrease failover time?
*First box failover config:*
*msk-dc-fwm-c2-1/9# sh run failover *
failover
failover lan unit primary
failover preempt 1
failover lan interface failover-lan Vlan104
failover polltime unit msec 500 holdtime 3
failover link failover-state Vlan105
failover interface ip failover-lan 192.168.255.253 255.255.255.252 standby
192.168.255.254
failover interface ip failover-state 192.168.255.249 255.255.255.252 standby
192.168.255.250
failover group 1
replication http
polltime interface 3
failover group 2
secondary
*msk-dc-fwm-c2-1/9# sh failover *
Failover On
Failover unit Primary
Failover LAN Interface: failover-lan Vlan 104 (up)
Unit Poll frequency 500 milliseconds, holdtime 3 seconds
Interface Poll frequency 15 seconds
Interface Policy 50%
Monitored Interfaces 4 of 250 maximum
Config sync: active
Version: Ours 4.0(3), Mate 4.0(3)
Group 1 last failover at: 14:41:29 UTC Jun 11 2009
Group 2 last failover at: 14:41:29 UTC Jun 11 2009
This host: Primary
Group 1 State: Standby Ready
Active time: 0 (sec)
Group 2 State: Standby Ready
Active time: 0 (sec)
1c Interface outside (0.0.0.0): Normal (Not-Monitored)
1c Interface inside (0.0.0.0): Normal (Not-Monitored)
backup Interface outside (0.0.0.0): Normal (Waiting)
backup Interface inside (0.0.0.0): Normal (Waiting)
documentum Interface outside (0.0.0.0): Normal
(Not-Monitored)
documentum Interface inside (0.0.0.0): Normal
(Not-Monitored)
engineering Interface outside (0.0.0.0): Normal
(Not-Monitored)
engineering Interface inside (0.0.0.0): Normal
(Not-Monitored)
ksupr Interface outside (0.0.0.0): Normal (Not-Monitored)
ksupr Interface inside (0.0.0.0): Normal (Not-Monitored)
monitoring Interface outside (0.0.0.0): Normal
(Not-Monitored)
monitoring Interface inside (0.0.0.0): Normal
(Not-Monitored)
sap Interface outside (0.0.0.0): Normal (Not-Monitored)
sap Interface inside (0.0.0.0): Normal (Not-Monitored)
sql Interface outside (0.0.0.0): Normal (Not-Monitored)
sql Interface inside (0.0.0.0): Normal (Not-Monitored)
vmware-mng Interface outside (0.0.0.0): Normal (Waiting)
vmware-mng Interface inside (0.0.0.0): Normal (Waiting)
vmware-vmotion Interface outside (0.0.0.0): Normal
(Not-Monitored)
vmware-vmotion Interface inside (0.0.0.0): Normal
(Not-Monitored)
Other host: Secondary
Group 1 State: Active
Active time: 326568 (sec)
Group 2 State: Active
Active time: 344824 (sec)
1c Interface outside (10.42.225.252): Normal (Not-Monitored)
1c Interface inside (10.42.225.252): Normal (Not-Monitored)
backup Interface outside (10.42.229.252): Normal (Waiting)
backup Interface inside (10.42.229.252): Normal (Waiting)
documentum Interface outside (10.42.226.252): Normal
(Not-Monitored)
documentum Interface inside (10.42.226.252): Normal
(Not-Monitored)
engineering Interface outside (10.42.231.252): Normal
(Not-Monitored)
engineering Interface inside (10.42.231.252): Normal
(Not-Monitored)
ksupr Interface outside (10.42.228.252): Normal
(Not-Monitored)
ksupr Interface inside (10.42.228.252): Normal
(Not-Monitored)
monitoring Interface outside (10.42.230.252): Normal
(Not-Monitored)
monitoring Interface inside (10.42.230.252): Normal
(Not-Monitored)
sap Interface outside (10.42.224.252): Normal
(Not-Monitored)
sap Interface inside (10.42.224.252): Normal (Not-Monitored)
sql Interface outside (10.42.227.252): Normal
(Not-Monitored)
sql Interface inside (10.42.227.252): Normal (Not-Monitored)
vmware-mng Interface outside (10.42.223.124): Normal
(Waiting)
vmware-mng Interface inside (10.42.223.124): Normal
(Waiting)
vmware-vmotion Interface outside (10.42.223.252): Normal
(Not-Monitored)
vmware-vmotion Interface inside (10.42.223.252): Normal
(Not-Monitored)
Stateful Failover Logical Update Statistics
Link : failover-state Vlan 105 (up)
Stateful Obj xmit xerr rcv rerr
General 41619 0 41940 0
sys cmd 41619 0 41619 0
up time 0 0 0 0
RPC services 0 0 0 0
TCP conn 0 0 114 0
UDP conn 0 0 0 0
ARP tbl 0 0 207 0
Xlate_Timeout 0 0 0 0
AAA tbl 0 0 0 0
DACL 0 0 0 0
Acl optimization 0 0 0 0
OSPF Area SeqNo 0 0 0 0
Logical Update Queue Information
Cur Max Total
Recv Q: 0 2 681787
Xmit Q: 0 0 41619
*Second box config:*
*msk-dc-fwm-c2-1/9# sh run fail*
failover
failover lan unit secondary
failover preempt 1
failover lan interface failover-lan Vlan104
failover polltime unit msec 500 holdtime 3
failover link failover-state Vlan105
failover interface ip failover-lan 192.168.255.253 255.255.255.252 standby
192.168.255.254
failover interface ip failover-state 192.168.255.249 255.255.255.252 standby
192.168.255.250
failover group 1
replication http
polltime interface 3
failover group 2
secondary
*msk-dc-fwm-c2-1/9# sh failover *
Failover On
Failover unit Secondary
Failover LAN Interface: failover-lan Vlan 104 (up)
Unit Poll frequency 500 milliseconds, holdtime 3 seconds
Interface Poll frequency 15 seconds
Interface Policy 50%
Monitored Interfaces 4 of 250 maximum
Config sync: active
Version: Ours 4.0(3), Mate 4.0(3)
Group 1 last failover at: 12:34:47 UTC Jun 11 2009
Group 2 last failover at: 07:30:05 UTC Jun 11 2009
This host: Secondary
Group 1 State: Active
Active time: 326640 (sec)
Group 2 State: Active
Active time: 344896 (sec)
1c Interface outside (10.42.225.252): Normal (Not-Monitored)
1c Interface inside (10.42.225.252): Normal (Not-Monitored)
backup Interface outside (10.42.229.252): Normal (Waiting)
backup Interface inside (10.42.229.252): Normal (Waiting)
documentum Interface outside (10.42.226.252): Normal
(Not-Monitored)
documentum Interface inside (10.42.226.252): Normal
(Not-Monitored)
engineering Interface outside (10.42.231.252): Normal
(Not-Monitored)
engineering Interface inside (10.42.231.252): Normal
(Not-Monitored)
ksupr Interface outside (10.42.228.252): Normal
(Not-Monitored)
ksupr Interface inside (10.42.228.252): Normal
(Not-Monitored)
monitoring Interface outside (10.42.230.252): Normal
(Not-Monitored)
monitoring Interface inside (10.42.230.252): Normal
(Not-Monitored)
sap Interface outside (10.42.224.252): Normal
(Not-Monitored)
sap Interface inside (10.42.224.252): Normal (Not-Monitored)
sql Interface outside (10.42.227.252): Normal
(Not-Monitored)
sql Interface inside (10.42.227.252): Normal (Not-Monitored)
vmware-mng Interface outside (10.42.223.124): Normal
(Waiting)
vmware-mng Interface inside (10.42.223.124): Normal
(Waiting)
vmware-vmotion Interface outside (10.42.223.252): Normal
(Not-Monitored)
vmware-vmotion Interface inside (10.42.223.252): Normal
(Not-Monitored)
Other host: Primary
Group 1 State: Standby Ready
Active time: 0 (sec)
Group 2 State: Standby Ready
Active time: 0 (sec)
1c Interface outside (0.0.0.0): Normal (Not-Monitored)
1c Interface inside (0.0.0.0): Normal (Not-Monitored)
backup Interface outside (0.0.0.0): Normal (Waiting)
backup Interface inside (0.0.0.0): Normal (Waiting)
documentum Interface outside (0.0.0.0): Normal
(Not-Monitored)
documentum Interface inside (0.0.0.0): Normal
(Not-Monitored)
engineering Interface outside (0.0.0.0): Normal
(Not-Monitored)
engineering Interface inside (0.0.0.0): Normal
(Not-Monitored)
ksupr Interface outside (0.0.0.0): Normal (Not-Monitored)
ksupr Interface inside (0.0.0.0): Normal (Not-Monitored)
monitoring Interface outside (0.0.0.0): Normal
(Not-Monitored)
monitoring Interface inside (0.0.0.0): Normal
(Not-Monitored)
sap Interface outside (0.0.0.0): Normal (Not-Monitored)
sap Interface inside (0.0.0.0): Normal (Not-Monitored)
sql Interface outside (0.0.0.0): Normal (Not-Monitored)
sql Interface inside (0.0.0.0): Normal (Not-Monitored)
vmware-mng Interface outside (0.0.0.0): Normal (Waiting)
vmware-mng Interface inside (0.0.0.0): Normal (Waiting)
vmware-vmotion Interface outside (0.0.0.0): Normal
(Not-Monitored)
vmware-vmotion Interface inside (0.0.0.0): Normal
(Not-Monitored)
Stateful Failover Logical Update Statistics
Link : failover-state Vlan 105 (up)
Stateful Obj xmit xerr rcv rerr
General 45207 0 44925 0
sys cmd 44833 0 44830 0
up time 0 0 0 0
RPC services 0 0 0 0
TCP conn 129 0 74 0
UDP conn 0 0 0 0
ARP tbl 245 0 21 0
Xlate_Timeout 0 0 0 0
AAA tbl 0 0 0 0
DACL 0 0 0 0
Acl optimization 0 0 0 0
OSPF Area SeqNo 0 0 0 0
Logical Update Queue Information
Cur Max Total
Recv Q: 0 3 715068
Xmit Q: 0 0 66148
--
Kind regards,
Tengiz Alaniya
More information about the cisco-nsp
mailing list