Difference between revisions of "Troubleshooting Tips"

From Tech-Wiki
Jump to: navigation, search
Line 7: Line 7:
 
# Anti-spoofing
 
# Anti-spoofing
 
# VPN Encryption domain
 
# VPN Encryption domain
# IPS
+
# IPS (ips off)
 
# Connection Limit
 
# Connection Limit
# Disable fwaccel
+
# Disable SecureXL (fwaccel off)
# Test in the other cluster member
+
# Test in the other cluster member (clusterXL_admin down –p)
 
# Issue a cpstop/cpstart or reboot
 
# Issue a cpstop/cpstart or reboot
 
# Consider installing the latest Jumbo hotfix accumulator or Recommended Hotfixes (per sk106162 and sk106389)
 
# Consider installing the latest Jumbo hotfix accumulator or Recommended Hotfixes (per sk106162 and sk106389)

Revision as of 15:08, 30 October 2017

Back to Gaia

If you are facing strange behavior, in an advanced/illogic scenario, evaluate/review the following items in this order:

  1. Policy
  2. Routing
  3. Anti-spoofing
  4. VPN Encryption domain
  5. IPS (ips off)
  6. Connection Limit
  7. Disable SecureXL (fwaccel off)
  8. Test in the other cluster member (clusterXL_admin down –p)
  9. Issue a cpstop/cpstart or reboot
  10. Consider installing the latest Jumbo hotfix accumulator or Recommended Hotfixes (per sk106162 and sk106389)
  11. Did I forget something?!
  12. That’s probably a bug, raise a TAC

Confirm before using:

 fw ctl zdebug + drop | grep 'x.x.x.x\|y.y.y.y'