NSRP not syncing

[pat_rasta]

Hi there!

I hope i could get new insights on my problem with NSRP. The active and passive FWs are not in sync. I am running ScreenOS 5.1r3 on NS500s. Here's what I did which leads to my eventual probelem:

1.) On the passive FW, from the console i've invoked:
exec nsrp sync global-config check-sum
This prompted that WARNING: Configurations Out of Sync.
2.) Then I disjoined the Passive FW from the Cluster by selecting Not in Cluster on the GUI. Even removed RTO synchronization beforehand.
3.) get nsrp vsdgroup on the Active FW shows that only the master is left.
4.) On the passive FW, i invoked unset all, config save NO. Reset.
5.) Upon boot up, i verified that it is a fresh unit.
6.) Invoked set nsrp cluster id 1, set nsrp cluster name <CLUSTER NAME>, and set nsrp rto-mirror sync
7.) On the active FW, i invoked set nsrp rto-mirror sync, then get nsrp vsd-group and verified that the backup FW is listed as primary backup.
8.) I invoked exec nsrp sync global-config save, reset, config save NO.
9.) Upon bootup, it loaded the configuration from the Active FW but ended up with a WARNING: Configuration Out of Sync.
10.) A core dump appeared as follows:
###Ins duplicate call_info,
Trace:
00613bb0 0060e85c 0060e93c 0060edcc 00273c4c 002737e0
002735d0 0026f6b0 0026f48c 000b3a6c 000ba89c 00081460

And this was sprawlling for so many times on the console terminal...

11.) I've tried removing the active FW from the cluster, thereby making them both standalone, then unset all on the backup, re-create the cluster on the active with less priority and with preempt enabled. Then joined the backup to the cluster and enabling RTO synchronization on both. Both nodes see each other as evident by the get nsrp vsdgroup command on both. Both know their roles, the active being the master, and the passive being the primary backup. However, when i execute exec nsrp sync global-config save, the core dumps appear again!

Please advice if someone already experienced this issue. It's impossible that there are redundant config on the passive firewall prior to executing exec nsrp sync global save because i've unsetted all everything beforehand.

i just noticed that the backup FW has additional interfaces plugged in its module bay (total of 6 fiber interfaces) while the active FW has only its out of the box 4 fiber 1000 interfaces. Both Firewalls are running the same ScreenOS version.

Please help!

[Ernest Lau]

Pat,

        Both units need to have the same hardware configuration and feature
licenses as well.

Regards,

Ernest

-----Original Message-----
From: pat_rasta [mailto:pat@...]
Sent: Monday, September 10, 2007 9:55 PM
To: nn@...
Subject: [nn] NSRP not syncing


Hi there!

I hope i could get new insights on my problem with NSRP. The active and
passive FWs are not in sync. I am running ScreenOS 5.1r3 on NS500s. Here's
what I did which leads to my eventual probelem:

1.) On the passive FW, from the console i've invoked:
exec nsrp sync global-config check-sum
This prompted that WARNING: Configurations Out of Sync.
2.) Then I disjoined the Passive FW from the Cluster by selecting Not in
Cluster on the GUI. Even removed RTO synchronization beforehand.
3.) get nsrp vsdgroup on the Active FW shows that only the master is left.
4.) On the passive FW, i invoked unset all, config save NO. Reset.
5.) Upon boot up, i verified that it is a fresh unit.
6.) Invoked set nsrp cluster id 1, set nsrp cluster name <CLUSTER NAME>, and
set nsrp rto-mirror sync
7.) On the active FW, i invoked set nsrp rto-mirror sync, then get nsrp
vsd-group and verified that the backup FW is listed as primary backup.
8.) I invoked exec nsrp sync global-config save, reset, config save NO.
9.) Upon bootup, it loaded the configuration from the Active FW but ended up
with a WARNING: Configuration Out of Sync.
10.) A core dump appeared as follows:
###Ins duplicate call_info,
Trace:
00613bb0 0060e85c 0060e93c 0060edcc 00273c4c 002737e0
002735d0 0026f6b0 0026f48c 000b3a6c 000ba89c 00081460

And this was sprawlling for so many times on the console terminal...

11.) I've tried removing the active FW from the cluster, thereby making them
both standalone, then unset all on the backup, re-create the cluster on the
active with less priority and with preempt enabled. Then joined the backup
to the cluster and enabling RTO synchronization on both. Both nodes see each
other as evident by the get nsrp vsdgroup command on both. Both know their
roles, the active being the master, and the passive being the primary
backup. However, when i execute exec nsrp sync global-config save, the core
dumps appear again!

Please advice if someone already experienced this issue. It's impossible
that there are redundant config on the passive firewall prior to executing
exec nsrp sync global save because i've unsetted all everything beforehand.

i just noticed that the backup FW has additional interfaces plugged in its
module bay (total of 6 fiber interfaces) while the active FW has only its
out of the box 4 fiber 1000 interfaces. Both Firewalls are running the same
ScreenOS version.

Please help!
--
View this message in context:
http://www.nabble.com/NSRP-not-syncing-tf4420267.html#a12608030
Sent from the Netscreen at Compsoc.com mailing list archive at Nabble.com.

_______________________________________________
nn mailing list
nn@...
http://www.compsoc.com/cgi-bin/mailman/listinfo/nn


_______________________________________________
nn mailing list
nn@...
http://www.compsoc.com/cgi-bin/mailman/listinfo/nn

[pat_rasta]

Hi Ernest! Thanks for your response! Appreciate it. I will try that on the
next activity window.

Regards,
Pat


-----Original Message-----
From: Ernest Lau [mailto:eclau-2006@...]
Sent: Thursday, September 13, 2007 11:33 AM
To: 'pat_rasta'; nn@...
Subject: RE: [nn] NSRP not syncing

Pat,

        Both units need to have the same hardware configuration and feature
licenses as well.

Regards,

Ernest

-----Original Message-----
From: pat_rasta [mailto:pat@...]
Sent: Monday, September 10, 2007 9:55 PM
To: nn@...
Subject: [nn] NSRP not syncing


Hi there!

I hope i could get new insights on my problem with NSRP. The active and
passive FWs are not in sync. I am running ScreenOS 5.1r3 on NS500s. Here's
what I did which leads to my eventual probelem:

1.) On the passive FW, from the console i've invoked:
exec nsrp sync global-config check-sum
This prompted that WARNING: Configurations Out of Sync.
2.) Then I disjoined the Passive FW from the Cluster by selecting Not in
Cluster on the GUI. Even removed RTO synchronization beforehand.
3.) get nsrp vsdgroup on the Active FW shows that only the master is left.
4.) On the passive FW, i invoked unset all, config save NO. Reset.
5.) Upon boot up, i verified that it is a fresh unit.
6.) Invoked set nsrp cluster id 1, set nsrp cluster name <CLUSTER NAME>, and
set nsrp rto-mirror sync
7.) On the active FW, i invoked set nsrp rto-mirror sync, then get nsrp
vsd-group and verified that the backup FW is listed as primary backup.
8.) I invoked exec nsrp sync global-config save, reset, config save NO.
9.) Upon bootup, it loaded the configuration from the Active FW but ended up
with a WARNING: Configuration Out of Sync.
10.) A core dump appeared as follows:
###Ins duplicate call_info,
Trace:
00613bb0 0060e85c 0060e93c 0060edcc 00273c4c 002737e0
002735d0 0026f6b0 0026f48c 000b3a6c 000ba89c 00081460

And this was sprawlling for so many times on the console terminal...

11.) I've tried removing the active FW from the cluster, thereby making them
both standalone, then unset all on the backup, re-create the cluster on the
active with less priority and with preempt enabled. Then joined the backup
to the cluster and enabling RTO synchronization on both. Both nodes see each
other as evident by the get nsrp vsdgroup command on both. Both know their
roles, the active being the master, and the passive being the primary
backup. However, when i execute exec nsrp sync global-config save, the core
dumps appear again!

Please advice if someone already experienced this issue. It's impossible
that there are redundant config on the passive firewall prior to executing
exec nsrp sync global save because i've unsetted all everything beforehand.

i just noticed that the backup FW has additional interfaces plugged in its
module bay (total of 6 fiber interfaces) while the active FW has only its
out of the box 4 fiber 1000 interfaces. Both Firewalls are running the same
ScreenOS version.

Please help!
--
View this message in context:
http://www.nabble.com/NSRP-not-syncing-tf4420267.html#a12608030
Sent from the Netscreen at Compsoc.com mailing list archive at Nabble.com.

_______________________________________________
nn mailing list
nn@...
http://www.compsoc.com/cgi-bin/mailman/listinfo/nn

_______________________________________________
nn mailing list
nn@...
http://www.compsoc.com/cgi-bin/mailman/listinfo/nn