Difference between revisions of "Troubleshooting Tips"
From Tech-Wiki
| Line 8: | Line 8: | ||
# VPN Encryption domain | # VPN Encryption domain | ||
# IPS (ips off) | # IPS (ips off) | ||
| − | # Connection Limit | + | # Connection Limit (fw ctl pstat) |
# Disable SecureXL (fwaccel off) | # Disable SecureXL (fwaccel off) | ||
# Test in the other cluster member (clusterXL_admin down –p) | # Test in the other cluster member (clusterXL_admin down –p) | ||
Revision as of 15:10, 30 October 2017
If you are facing strange behavior, in an advanced/illogic scenario, evaluate/review the following items in this order:
- Policy
- Routing
- Anti-spoofing
- VPN Encryption domain
- IPS (ips off)
- Connection Limit (fw ctl pstat)
- Disable SecureXL (fwaccel off)
- Test in the other cluster member (clusterXL_admin down –p)
- Issue a cpstop/cpstart or reboot
- Consider installing the latest Jumbo hotfix accumulator or Recommended Hotfixes (per sk106162 and sk106389)
- Did I forget something?!
- That’s probably a bug, raise a TAC
Confirm before using:
fw ctl zdebug + drop | grep 'x.x.x.x\|y.y.y.y'