For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

badmojo42_14014's avatar
badmojo42_14014
Icon for Nimbostratus rankNimbostratus
Dec 18, 2013

Standby interfaces stay active

I have two LTM 4000's in an Active/Standby configuration. They are connected to two Palo Alto firewalls and a Cisco 6500 VSS core. I have two interfaces on each PAN connected to the F5's so that th...
design
Eric_St__John's avatar
Eric_St__John
Icon for Employee rankEmployee
Dec 18, 2013

Did you clear the arp table on the firewall after configuring MAC Masquerading? Sounds like the firewalls are dropping the gratuitous ARP, as they should, which is why you should be using MAC Masquerading. It sounds like for a short bit the MAC of the standby unit was learned by the firewalls, and needed to either be cleared or wait for them to timeout.

 

Eric