Troubleshooting guide

96
Chapter 9: Troubleshooting Active Network
Management
Troubleshooting Synchronization
Synchronization and High Availability...........................................................................................................98
Feature Not Supported by synchronization....................................................................................................98
What Tables are synchronized.......................................................................................................................99
Troubleshooting Synchronization ...................................................................................................................99
Synchronization Tests ....................................................................................................................................99
Resolving Common Synchronization Problems.........................................................................................100
How to add a table to the Synchronization Tables.......................................................................................100
Support for High Availability for IPSec/IKE...................................................................................................100
How to verify the state tables on primary and secondary FireWalls are being synchronized......................100
Will Synchronization work between two gateways that differ in platform?...................................................100
Troubleshooting Fail-over
Fail-over in High Availability Applications ..................................................................................................101
Introduction...................................................................................................................................................101
High-Availability Failure Detection - How it works........................................................................................101
VPN Fail-Over...............................................................................................................................................103
Troubleshooting Fail-Over............................................................................................................................103
Resolving Common Fail-Over Problems......................................................................................................105
Debugging High-Availability .........................................................................................................................106
Information to Gather....................................................................................................................................106
Troubleshooting Load Balancing
How Server Load Balancing Works .............................................................................................................107
HTTP Method ...............................................................................................................................................107
Non-HTTP (Other) Method ...........................................................................................................................107
Load Balancing Components .......................................................................................................................107
License requirement for Load Balancing ....................................................................................................107
Load Balancing Configuration Guides ........................................................................................................108
How to configure VPN-1/FireWall-1 with Connect Control (Load-Balance across multiple servers)...........108
How to configure Connect Control and NAT for Server Load Balancing without Default Routes................108
Resolving Common Load Balancing problems ..........................................................................................108
HTTP connections and the “Other” load balancing method.........................................................................108
NAT and the “Other” load balancing method................................................................................................108
If using Static NAT to associate external IP addresses with internal servers, which IP addresses should be
used in the server group that is part of the HTTP logical server definition? ................................................108
Load balancing does not work on HPUX when the web servers are on virtual interfaces...........................109
Connection going to the connect control address are dropped by the Stealth Rule....................................109