This article provides information about the meaning of the policy traffic log message- 'session closed HA'.

The log message 'session closed HA' is noticed in the traffic logs.

Sample messages:

Jul 27 20:12:06 fpv1prod201/fpv1prod201 RT_FLOW: RT_FLOW_SESSION_CLOSE: session closed HA: 10.64.197.28/51384->10.69.68.20/1352 None 10.64.197.28/51384->10.69.68.20/1352 None None 6 domino_replikationen_gad_prod core intern 33173 23(3350) 20(2948) 50997

The message session closed HA has the reason NAT_SESSION_CLOSE_NSRP associated with it. This indicates that the backup node received a HA message from the peer (or primary node) and it will close a session according to the HA message. This may occur in the following scenarios:

• Backup node receives a session close message from the primary node (this should be the most common scenario).

• Backup node receives a session create message from the primary node; but the backup node finds an old existing session. The backup node will close the old session as session closed HA and create a new session (this may happen if the old session's delete message is lost or delayed).

• Backup node receives a FIN state update message from the peer.  After the update, both wings are in FIN state on the backup node.  The backup node will close the session as session closed HA (this can happen if each node receives one of the two FINs because of RG1 fail over).

• Backup node receives a TIME REQUEST message from the peer backup session. The backup node will close the session as session closed HA .