Hi all,
In an HRP mirroring mode scenario, multiple dynamic routing protocols used, the issue is that on failover tests, the switchover from firewall A(active) to firewall B(standby) takes ~1-2 seconds which is good.
When the failover needs to be undone and the master to be back on the firewall A, the preempt is disabled, it takes more than 20 seconds, Firewall B(active) to firewall A(standby) ~25 seconds.
The failover was done via CLI : hrp switch active / backup
After failover, the following command was used to clear: undo hrp switch
The reason for this behavior is that, when service interfaces on the FW works at Layer 3, it connects to upstream and downstream routers running dynamic routing protocols with them, and in this scenario hot standby in mirroring mode cannot be configured.
When the FWs are working in mirroring mode, the standby FW does not send or receive any route negotiation packets and as a result, the dynamic routing neighbor relationship between the FWs and the upstream and downstream routers cannot be established.
During the active / standby switchover, the new active FW needs to renegotiate the routes with the upstream and downstream routers.
As a result, the services are interrupted for a long time during the active/standby switchover.
