HP VPN Firewall Appliances High Availability Configuration Guide

• Multiple masters coexist for a long period. This is because firewalls in the VRRP group cannot

receive VRRP packets, or the received VRRP packets are illegal.

Solution

Ping between these masters, and do the following:

• If the ping fails, check network connectivity.

• If the ping succeeds, check that their configurations are consistent in terms of number of virtual IP

addresses, virtual IP addresses, advertisement interval, and authentication.

Frequent VRRP state transition

Symptom

Frequent VRRP state transition.

Analysis

The VRRP advertisement interval is set too short.

Solution

Increase the interval for sending VRRP advertisements or configure a preemption delay.