Loading...
Loading...
Firepower 1010 HA pair goes to active/active without impact seen on the network or New hosts are not discoverable/ not able to connect to the device without impact seen on the network. The previous active unit will not be reachable on any Lina interface, not even the HA link The FTD mgmt interface will be working correctly On standalone units this can cause interfaces to flap, or completely fail requiring a reboot to recover
Issue is specific to Firepower 1010 platform
For device recovery reboot the affected units New hosts can be connected to device with static mac configurations
On the affected device we see kernel packet dumps on /ngfw/var/log/messages No arp will be seen on the Lina CLI as ARP packets never reach the Lina engine (are dumped by kernel) Ping from or to the device will fail As no traffic is processed by the unit hence there is no direct impact on the network, other than the HA/ Cluster stability or adding new hosts to the device. In case of interface flaps no kernel dumps have been found but traffic is still affected.
Click on a version to see all relevant bugs
Cisco Integration
Learn more about where this data comes from
BugZero Plan
Streamline upgrades with automated vendor bug scrubs
BugZero Prevent
Wish you caught this bug sooner? Get proactive today.