No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

FAQ-Why Does the Original Designated Active Firewall Become the Designated Standby Firewall After Recovery

Publication Date:  2015-06-30 Views:  376 Downloads:  0
Issue Description
Why Does the Original Designated Active Firewall Become the Designated Standby Firewall After Recovery?
Solution
To become the designated active firewall, the firewall must meet the following conditions:

     Only the firewall whose VRRP management group is in active state has the chance to become the designated active device. (In active/standby mode, the active firewall is the designated active firewall.)

     In load balancing mode, the designated active firewall is selected based on the priorities of the VRRP management groups and IP addresses of heartbeat interfaces.

The designated active and standby firewalls do not switch statuses unless a fault occurs on the designated active firewall or the designated active firewall leaves the VRRP group. This mechanism ensures the stability of the designated active firewall.

Therefore, in load balancing mode, the original designated standby firewall becomes the designated active firewall after the original designated active firewall fails. After the original designated active firewall recovers, the original active VGMP group on this firewall preempts to be the active VGMP group, but the original designated active firewall does not preempt.

END