fwsm - active/standby - "Vlan configuration mismatch between peers"

z.voynov · ‎01-16-2012

Hi,

A FWSM pair fall in to active active sittuation due to a vlan configuration mismatch. What would be the best way to synchronize configurations and return to the normal active/standbay? There is a new vlan on the primary fwsm and at present both are in active state.

Thank you in advance.

Zdravko

Jouni Forss · ‎01-19-2012

Hi,

To my understanding the FWSMs (even though both active) have identical configurations?

Have you perhaps done so that on the core switch you have only issued the "firewall vlan-group only on the primary core device (to which the FWSM is attached) and not the secondary core device?

The only time I have witnessed the same situation is when configuring a new customer link and I have only configured the primary unit (and about to configure the same on the standby unit)

Hope it helps, not sure if the above was what you meant.

- Jouni