5 Replies Latest reply on Oct 23, 2014 1:08 PM by rgonzalezwilson

    MFE 4016 cluster behavior

    rgonzalezwilson

      one cluster MFE 4016 V8.3.2 platform, armed with 10GB modules and when we test are made from an external ping from a point either the VIP or physical a loss occurs, for example 1000 pings made are lost 5 but sequentially after n ping lost one as seen in the output that attached

       

       

      CA2 # ping

      Protocol [ip]:

      Target IP address: ------------------------------

      Repeat count [5]: 1000

      Datagram size [100]: 1400

      Timeout in seconds [2]:

      Extended commands [n]:

      Sweep range of sizes [n]:

      Type escape sequence to abort.

      Sending 1000-byte ICMP Echos 1400 to ----------------------, timeout is 2 seconds:

      !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

      !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

      !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!. !!!!!!!!!!

      !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

      !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

      !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!

      !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

      !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

      !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

      !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

      !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

      !!!!!!!!!!!!!!!!!!!!!!!!!!!!!. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

      !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

      !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

      !!!!!!!!!!!!!!!!!!!.

       

       

      What I want to know if I could tell if this is a common behavior when working with cluster MFE since it is one of the few implementations with these characteristics (cluster and 10gb interfaces), so anyway I'm opening a case in the KB .

       

       

      So thank you very much in advance !!!

        • 1. Re: MFE 4016 cluster behavior
          Peter M

          This is best dealt with in MFE so have moved it there.  Moderator

          • 2. Re: MFE 4016 cluster behavior
            rgonzalezwilson

            i need know if you have any idea about this is strange because  is a p2p conection

             

            thanks!

            • 3. Re: MFE 4016 cluster behavior
              Peter M

              Someone with Enterprise knowledge will hopefully answer you soon.

              • 4. Re: MFE 4016 cluster behavior
                sliedl

                This behavior does not look abnormal to me.  Perhaps the firewall is too busy at some points in time to answer one of the ping requests.  Does every single echo request hit the firewall (e.g. you didn't get a reply to one echo request out of 200; did that echo request actually hit the firewall?  If it did, did the firewall reply and you're simply not receiving the reply?  It could be simple packet loss.)?

                 

                If you try the same test with a 3 second timeout, do you get a reply to every ping?  What about 4 seconds?

                • 5. Re: MFE 4016 cluster behavior
                  rgonzalezwilson

                  the problem is that this was done on a cluster without load MFE, moreover, made a similar approved today in another cluster firewall MFE and the same thing happened.

                  entinedo not truth also when I ping the vip interface and ping another computer on the second machine falls.

                  same test

                   

                  Protocol [ip]:

                  Target IP address: ------------------------------

                  Repeat count [5]: 1000

                  Datagram size [100]: 1400

                  Timeout in seconds [2]:

                  Extended commands [n]:

                  Sweep range of sizes [n]:

                  Type escape sequence to abort.

                  Sending 1000-byte ICMP Echos 1400 to ----------------------, timeout is 2 seconds:

                  !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

                  !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

                  !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!. !!!!!!!!!!

                  !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

                  !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

                  !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!

                  !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

                  !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

                  !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

                  !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

                  !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

                  !!!!!!!!!!!!!!!!!!!!!!!!!!!!!. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

                  !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

                  !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

                  !!!!!!!!!!!!!!!!!!!.

                   

                  other host

                  caida durante ping.jpg