Troubleshooting Tips

From Tech-Wiki
Revision as of 15:49, 27 November 2017 by Fabricio.Lima (Talk | contribs)

Jump to: navigation, search

Back to Gaia

If you are facing strange behavior, in an advanced/illogic scenario, evaluate/review the following items in this order:

  1. Policy
  2. NAT (correct NAT mode?)
  3. Routing
  4. Anti-spoofing (even from return packet)
  5. VPN Encryption domain
  6. IPS (ips off)
  7. Connection Limit (fw ctl pstat)
  8. Disable SecureXL (fwaccel off)
  9. Test in the other cluster member (clusterXL_admin down –p)
  10. Issue a cpstop/cpstart or reboot
  11. Consider installing the latest Jumbo hotfix accumulator or Recommended Hotfixes (per sk106162 and sk106389)
  12. Did I forget something?!
  13. That’s probably a bug, raise a TAC

Confirm the reason of your packet being dropped using: 

 fw ctl zdebug + drop | grep 'x.x.x.x\|y.y.y.y'
Retrieved from ‘http://tech-wiki.net/index.php?title=Troubleshooting_Tips&oldid=1086’