For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

badmojo42_14014's avatar
badmojo42_14014
Icon for Nimbostratus rankNimbostratus
Dec 18, 2013

Standby interfaces stay active

I have two LTM 4000's in an Active/Standby configuration. They are connected to two Palo Alto firewalls and a Cisco 6500 VSS core. I have two interfaces on each PAN connected to the F5's so that th...
design
Steve_Janetzke_'s avatar
Steve_Janetzke_
Icon for Nimbostratus rankNimbostratus
Dec 18, 2013

Why are the interfaces active for a stanby unit? The Standby unit is not offline, it is still processing traffic for the non floating self-IP or IP's associated to the vlan for which that interface is listed as a resource in the configuration. The non-floating IP's are always reachable on the standby unit, it is the floating IP for the VLAN of the HA pair that swaps back and forth based on the Active or Standy status. The interface does not go down.

 

When you look at the ARP tables on the firewalls is the MAC for the floating IP consistent or does it change when you failover/failback?

 

  • badmojo42_14014's avatar
    badmojo42_14014
    Icon for Nimbostratus rankNimbostratus
    Dec 18, 2013
    It shows both floating and the local address for the standby device. When I try to connect to the website, the arp table shows (incomplete)