Support Center > Search Results > SecureKnowledge Details
Traffic outage on ClusterXL after enabling both CoreXL Dynamic Dispatcher and SecureXL NAT Templates
Symptoms
  • Traffic outage on ClusterXL after enabling both CoreXL Dynamic Dispatcher (sk105261) and SecureXL NAT Templates (sk71200).

  • SmartView Tracker logs show that state of cluster members flaps (down-up-down-up...).

  • /var/log/messages file on cluster members repeatedly shows:
    ;fwmultik_dispatch_inbound: instance mismatch (on connection0.0.0.0(8116) -> X.X.X.0(8116) IPP 17): predefined says 1 lookup says 0)

  • Disabling either CoreXL Dynamic Dispatcher (sk105261), or SecureXL NAT Templates (sk71200) resolves the issue.

Cause

Unneeded lookups in the CoreXL Dispatcher kernel table cause the CoreXL Dispatcher to mistakenly identify a mismatch between the cluster's request to dispatch the packet to the cluster CoreXL FW instance, and the connection entry in CoreXL Dispatcher kernel table.


Solution
Note: To view this solution you need to Sign In .