[AF] After enabling Link Aggregation, Sessions is still out of sync

Problem Description

Topology:

AF dual-active deployment, a pair Virtual wire. Link Aggregation is configured.

Warning Info

It is found that the data still Sensitive inconsistent paths back and forth, and the application control Policies must be bidirectional for normal access.
Capture packets of a device and find that there are only unidirectional data packets on the interface:

Effective troubleshooting steps

Based on the problem symptoms, it can be confirmed that there is a problem with the Sessions of the Link Aggregation.
After checking the configuration, it was found that two pairs of virtual network cable interfaces were written in the internal and external network Zones the Virtual wire Interfaces, but only one pair Virtual wire was connected on the actual device.
Try removing the unconnected Interfaces and saving it so that Sessions can be synchronized normally.
Screenshot of normal synchronization:
Device A: Received a one-way reply packet

Device B: One-way request first, but the reply packet from device A is synchronized.

Root cause

For the internal and external network areas of Link Aggregation, only interfaces that are connected to cables can be selected; otherwise, Link Aggregation will not take effect.

solution

For the internal and external network areas of Link Aggregation-machine aggregation, only the interfaces that are connected to the Interfaces need to be selected.

Original Link

https://support.sangfor.com.cn/cases/list?product_id=13&type=1&category_id=940&isOpen=true