FAQ-Why Does the Original Designated Active Firewall Become the Designated Standby Firewall After Recovery

Publication Date:  2015-06-30 Views:  178 Downloads:  0
Issue Description
Why Does the Original Designated Active Firewall Become the Designated Standby Firewall After Recovery?
Solution
To become the designated active firewall, the firewall must meet the following conditions:

     Only the firewall whose VRRP management group is in active state has the chance to become the designated active device. (In active/standby mode, the active firewall is the designated active firewall.)

     In load balancing mode, the designated active firewall is selected based on the priorities of the VRRP management groups and IP addresses of heartbeat interfaces.

The designated active and standby firewalls do not switch statuses unless a fault occurs on the designated active firewall or the designated active firewall leaves the VRRP group. This mechanism ensures the stability of the designated active firewall.

Therefore, in load balancing mode, the original designated standby firewall becomes the designated active firewall after the original designated active firewall fails. After the original designated active firewall recovers, the original active VGMP group on this firewall preempts to be the active VGMP group, but the original designated active firewall does not preempt.

END