![](/images/new-backgrounds/1316947/316947405x1.webp)
Monitoring the Firewall State
By default, IPSO monitors the state of the firewall and responds appropriately. If a VRRP master detects that the firewall is not ready to handle traffic or is not functioning properly, the master fails over to a backup system. If all the firewalls on all the systems in the VRRP group are not ready to forward traffic, no traffic will be forwarded.
To enable or disable Monitor Firewall state
1.Click VRRP under Configuration > High Availability in the tree view.
2.Click Enabled in the Monitor Firewall State field.
To disable this option, if you have enabled it, click Disabled. The default is Enabled.
3.Click Apply
4.Click Save to make your changes permanent.
Troubleshooting VRRP
This section lists common problems with VRRP configurations. Please consult this section before contacting Customer Support. For information about contacting Nokia Customer Support, go to https://support.nokia.com/
You can log information about errors and events to troubleshoot VRRP by enabling traces for VRRP.
To enable traces for VRRP
1.Click Config on the home page.
2.Click the Routing Options link in the Routing Configuration section.
3.Scroll down the Trace Options section to VRRP and choose an option from the Add Option
4.Click Reset Routing.
The system restarts the routing subsystem and signals it to reread its configuration. The option you selected, its name and On/Off radio buttons are displayed on the page.
General Configuration Considerations
If VRRP failover does not occur as expected, verify that the following items are correctly configured.
All routers of a VRRP group must have the same system times. The simplest way to synchronize times is to enable NTP on all nodes of the VRRP group. You can also manually change the time and time zone on each node so that it matches the other nodes. It should match to within a few seconds.
All routers of a VRRP group must have the same hello interval.
Nokia Network Voyager for IPSO 4.0 Reference Guide | 203 |