VeloCloud Enhanced HA Troubleshooting and related commands

Products

• VMware SD-WAN by VeloCloud

Issue/Introduction

This KB would discuss steps to troubleshoot Enhanced HA.

Environment

VMware SD-WAN by VeloCloud

Resolution

In Normal HA, one of the requirements was to have an L2 Switch on WAN side and the HA pair connect to Same WAN links. Same ISP link must be connected to the same port on both Edges. 

With Enhanced HA the above limitation is avoided. The Enhanced HA eliminates the need for L2 Switches on WAN side of the Edges. Edges automatically select either normal HA or the enhanced HA when the active edge detects different WAN links connected to the Standby Edge. The VCO configuration remains same as in normal HA – No change. 

In this mode, the HA can be thought of as in Active-Active Mode. 

There is an active overlay tunnel established on WAN link on the Standby edge. Traffic is forwarded on this overlay tunnels in the same way as on a normal multiple overlay tunnels on a single edge. This is illustrated in the above diagram. We can see 2 Data Tunnels, Data Tunnel 1 and Data Tunnel 2. 

**Note**: The two VCEs should not have the WAN links on the same interface. For example in the above diagram, the WAN Link on the active edge is on GE2 and on the Standby is on GE3. 

 

Using Secure CLI feature, the below commands can be run to troubleshoot issues:

On the Active Edge, When we run “debug --link” the link could be physically be on the Standby. For example,  

In the below output 

GE1 could be physically on the Standby Device.  

If you run a “ethtool GE1” you would see that  “no link”  detected as this interface does not physically exist  on the Active device. 

This can be further confirmed by running “debug --ha lstate”. 

The debug --ha lstate shows this link physically on the other device as IF STATE : USE_PEER. The mac address will be the GE1 mac as seen after logging into the Standby device.