Troubleshooting active/standby switchover on the USG6000

3

Active/standby firewall switchover troubleshooting
The anomaly on the standby firewall prevents status switchover after the service interface on the active firewall is faulty.
Symptom
After GigabitEthernet1/0/4 on the active firewall is faulty, the service is not switched to the standby firewall.
Alarm information
The active firewall has VRRP status change information and interface down information.
2012-03-22 14:15:59 sysname %%01VRRP/4/STATEWARNING(1): Interface: GigabitEthernet1/0/1, Virtual Router 1: STANDBY changed to INITIALIZE!
2012-03-22 14:15:59 sysname %%01IFNET/4/LINK_STATE(1): Line protocol on interface GigabitEthernet1/0/4 has turned into DOWN state.
Possible cause
Both firewalls are in active state.
After the interface on the active firewall is faulty, its priority is still higher than the standby firewall.
Procedure
1. Check firewall logs to confirm that the active/standby status is normal when the fault occurs.
2. Run the display hrp group command to check the VGMP group priority of the two firewalls.
The priority of the Active VGMP group on the active firewall is 64999, which is normal. The priority of the Standby VGMP group on the standby firewall is 64996, indicating that two interfaces on the standby firewall are faulty. This causes the priority of the Standby VGMP group to reduce by 4. The priority of the Active VGMP group on the active firewall is higher than the priority of the Standby VGMP group on the standby firewall, and therefore status switchover does not occur.
3. Run the display hrp state command to check the hot standby status of the standby firewall.
4. HRP_S display hrp state

The firewall's config state is: STANDBY
Current state of virtual routers configured as standby:
GigabitEthernet1/0/3.2 vrid 5 : initialize (down)
GigabitEthernet1/0/3.1 vrid 4 : initialize (down)
GigabitEthernet1/0/2 vrid 3 : standby
GigabitEthernet1/0/1 vrid 2 : standby
GigabitEthernet1/0/4 vrid 1 : standby
Two interfaces on the standby firewall are down, and the priority of the Standby VGMP group is "65000 - 4 = 64996".
Process the subinterface fault so that the subinterface can be Up.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top