For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Dengfeng_54944's avatar
Dengfeng_54944
Icon for Nimbostratus rankNimbostratus
Feb 11, 2013

what will happend with HSRP failover with auto_lasthop but without lasthop pool setup

We are running 10.2.x with auto_lasthop set but we did not have lasthop pool set and used, what will happend when the external HSRP routers failsover: will it only affect existing sessions and new co...
config
design
Hamish's avatar
Hamish
Icon for Cirrocumulus rankCirrocumulus
Feb 11, 2013
That depends on what happens to the MAC address that's listed in the connection.

 

 

if the MAC that initiated the connection fails over with the HSRP then it's invisible.

 

if the MAC that initiated the connection DOES NOT fail over with the HSRP, then the existing connections in the connection table will hang.

 

 

This is by design apparently. IIRC the only way to have this behaviour change is to configure a last-hop pool. In which case a poolmember down will (apparently) cause a fixup of the lasthop MAC address for the connections in the connection table already. Thinking back though there was some reason we couldn't use lasthop pools when I last looked at this (Back when I used to look after a firewall sandwhich), but I can't quite remember why ATM...

 

 

 

H