I get the following when I combine stateful CBAC and Stateful NAT. When I enable Stateful NAT all is well. Stateful CBAC all is well, until you do the reboot that is required to bring the redundancy scheme into sync. Then it seems as though it breaks the stateful nat. Really in this case, stateful nat is unnecessary, because it is all one to one. However, the directions ask for stateful NAT, so I assume that we need to get it so the child sessions can be created. I guess my question is what is the error below trying to tell me?
*Aug 1 03:11:57.213: %FW-6-DROP_PKT: Dropping udp session 9.9.156.11:15555 9.9.156.6:15555 due to device running in HA standby mode with ip ident 12839 R6# *Aug 1 03:12:27.213: %FW-6-DROP_PKT: Dropping udp session 9.9.156.11:15555 9.9.156.6:15555 due to device running in HA standby mode with ip ident 13323
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
