Not able to access Standby monitoring IP on WAN interface

Description

Packet captures show packets are consumed when attempting to ping or manage the stand-by HA monitoring IP. There is no access to management and no ping response.

Cause

You may have experienced an issue when HA is configured and you are not able to access WAN monitoring IP of the standby unit. Be sure to check the configuration in WAN Failover and LB. If the ratio method of load balancing is enabled there may be an issue with interface priority causing the packets to be consumed and not forwarded.

Resolution

  1. Navigate to Network|Failover & LB. For this example we are using the legacy GUI. How to Enable Legacy View
  2. We can see here in Failover & LB type, ratio is enabled, we need to move the X1 to the top of the interface distribution list. Here we can see it is listed below X6 and X7 interface. Our monitoring IP address is located on the X1 so we need to set it to top priority.

Image

  3. Select Basic Failover from the drop down to adjust the interface ordering. Highlight the desired WAN interface(X1 in this example) press the up arrow to move the interface the   monitoring IP belongs to up the interface ordering list.

       Image

  5. Verify access to secondary WAN monitoring IP is now available.

Related Articles

  • SonicOS 8.1.0 FAQ
    Read More
  • SonicWall GEN8 TZs and GEN8 NSas Settings Migration
    Read More
  • Getting started with SonicWall firewalls
    Read More
not finding your answers?