Quote:
Originally Posted by cciesec2006  However, if I reboot the firewall or do "cpstop;cpstart", the cluster will show as "down". To fix it, I have to uncheck "clusterXL" in the gateway cluster properties, push the policy, check "clusterXL" again, push the policy again, then I get my clusterXL back. |
I'm guessing that the "down" you see is in the Smartview Monitor? I'd be more interested in what the cluster members themselves said their state was via "cphaprob state" and "cpahprob -a if" for each member. It may give you more information with which to work on.
Also, not defining the topology seems like a bad idea to me, especially since many cluster features depend on whats defined in the topo. If you don't want to do antispoofing then simply uncheck it once the interface topo is defined.