Nokia Network Voyager for IPSO 4.0 Reference Guide 203Monitoring the Firewall StateBy default, IPSO monitors the state of the firewall and responds appropriately. If a VRRP masterdetects that the firewall is not ready to handle traffic or is not functioning properly, the masterfails over to a backup system. If all the firewalls on all the systems in the VRRP group are notready to forward traffic, no traffic will be forwarded.To enable or disable Monitor Firewall state1. Click VRRP under Configuration > High Availability in the tree view.2. Click Enabled in the Monitor Firewall State field.To disable this option, if you have enabled it, click Disabled. The default is Enabled.3. Click Apply4. Click Save to make your changes permanent.Troubleshooting VRRPThis section lists common problems with VRRP configurations. Please consult this sectionbefore contacting Customer Support. For information about contacting Nokia CustomerSupport, go to https://support.nokia.com/You can log information about errors and events to troubleshoot VRRP by enabling traces forVRRP.To enable traces for VRRP1. Click Config on the home page.2. Click the Routing Options link in the Routing Configuration section.3. Scroll down the Trace Options section to VRRP and choose an option from the Add Optiondrop-down list.4. Click Reset Routing.The system restarts the routing subsystem and signals it to reread its configuration. Theoption you selected, its name and On/Off radio buttons are displayed on the page.General Configuration ConsiderationsIf VRRP failover does not occur as expected, verify that the following items are correctlyconfigured. All routers of a VRRP group must have the same system times. The simplest way tosynchronize times is to enable NTP on all nodes of the VRRP group. You can also manuallychange the time and time zone on each node so that it matches the other nodes. It shouldmatch to within a few seconds. All routers of a VRRP group must have the same hello interval.
