HA failover and ARP confusion
I am having some trouble with a HA failover scenario and suspect it's the switch (but can see no evidence of this) however the problem presents itself as stale ARP entries so thought I would ask here.
I am running 10.2.0 1755.1
I have 3 VLANS configured:
VLAN_A on 1.1
VLAN_B on 1.2 (tagged)
VLAN_C on 1.2 (tagged)
I have self IP's for VLAN A only (one static for each and one floating)
My default route is a gateway on VLAN A
I have virtuals on all three VLANS.
Both units are synced.
VLAN configs are duplicated and by default I am not using masquerading.
When Unit 1 is Active all virtuals work fine.
I force Unit 1 to standby ... all nodes and virtuals on the new active (Unit 2) are green.
Virtuals on VLAN A continue to work as desired, appropriate changes to the ARP table on the switch are observed.
Virtuals on VLAN B and C do not respond.
Checking ARP tables on the switch....entries for virtuals on B and C appear stale.
If I fail back, all works ok.
I only have 4 virtuals on VLAN C and 9 on B so I don't think its Gratuitious ARP spam (ref http://support.f5.com/kb/en-us/solu...r=11136085)
I've tried using MAC Masquerade on the offending VLAN's although I do not have visibility into the switch again until tomorrow at which time I'll find out if the table is correct. However do a 'b load' on both units and I did fail over with no different results.
I've also observed I only have ARP entries on either LTM for VLAN A - I assume this is because I only have a Self IP for A (I assume I need an address on the VLAN I want to issue Gratuitous ARP's on for the reply) , I am unsure if I should see entries for the other two VLANs given I have no Self IP's for B and C. Unit 1 works without visible entries, so I assumed this would be good for Unit 2.
I've seen the switchport (Cisco IOS) config, and the ports for Unit 1 1.2 and Unit 2 1.2 are identical.
Any ideas? have I missed something in my config? any clues about what to look for on the switch?
Any advice appreciated.