ACE FT Vlan Down

Question

I'm trying to configure Fault Tolerance on a pair of 4710s.  I followed the doc, and configured int gi1/4 as the fault tolerance interface, using vlan 12.  However the GUI is saying FT Vlan Down
The troubleshooting wiki said check the physical connectivity, but everything there looks good.  Each ACE can ping it's own IP, but not the router on that VLAN, or the peer.   They're connected to a dedicated VLAN in a switch, and I even tried a crossover cable to directly connect the two.
Here's our config:
ace1/Admin# show running-config ft
Generating configuration....
ft interface vlan 12
  ip address 192.168.12.1 255.255.255.0
  peer ip address 192.168.12.2 255.255.255.0
  no shutdown
ft peer 1
  heartbeat interval 300
  heartbeat count 20
  ft-interface vlan 12
  query-interface vlan 1000
ft group 1
  peer 1
  peer priority 200
  associate-context Admin
  inservice
interface gigabitEthernet 1/4
  description FT
  ft-port vlan 12
  no shutdown
Everything looks good, the interface is up/up, but I can't ping the peer.  Gui shows FT Vlan Down. Here's a show ft peer...
ace1/Admin# show ft peer 1 detail
Peer Id                      : 1
State                        : FSM_PEER_STATE_DOWN
Maintenance mode             : MAINT_MODE_OFF
FT Vlan                      : 12
FT Vlan IF State             : UP
My IP Addr                   : 192.168.12.1
Peer IP Addr                 : 192.168.12.2
Query Vlan                   : 1000
Query Vlan IF State          : UP, Manual validation - please ping peer
Peer Query IP Addr           : 0.0.0.0
Heartbeat Interval           : 300
Heartbeat Count              : 20
Tx Packets                   : 0
Tx Bytes                     : 0
Rx Packets                   : 0
Rx Bytes                     : 0
Rx Error Bytes               : 0
Tx Keepalive Packets         : 0
Rx Keepalive Packets         : 0
TL_CLOSE count               : 0
FT_VLAN_DOWN count           : 0
PEER_DOWN count              : 2
SRG Compatibility            : INIT
License Compatibility        : INIT
FT Groups                    : 1
Any other ideas on what to check?
Thanks
Tom

Answer 1

Hi Tom,
It looks the vlan and the physical interface are up. You can anyway check the following to confirm:
sh interface gi 1/4
sh interface vlan 12
In "sh interface gi 1/4 counters", do you see the "RX packets" counter increasing?
You should be able to ping 192.168.12.2 from 192.168.12.1 and vice versa. Which ip did you assign to the other peer. Should be:
ft interface vlan 12
  peer ip address 192.168.12.2 255.255.255.0
  ip address 192.168.12.1 255.255.255.0
  no shutdown
You can check as well "sh ft stats" and see if the heartbeats counter are increasing.
Regarding to other interfaces, you mention that you can't ping devices on the ACE adjacent vlans. Are you allowing icmp traffic? For instance:
policy-map type management first-match management
  class management
    permit
class-map type management match-any management
  match protocol icmp any
service-policy input management
Finally, did you check whether you are able to resolve mac addresses?
I hope it helps,
Olivier