View Single Post
  #9 (permalink)  
Old 2008-05-30
melipla melipla is offline
Senior Member
 
Join Date: 2006-01-25
Posts: 926
Rep Power: 3
melipla has an average reputation (10+)
Default Re: Change SIC Interface

Quote:
Originally Posted by vijayant View Post
Time difference between firewalls is 40 seconds, between Smart Center Server and Firewalls is approx 7 min.
There shouldn't be any time difference between any of these devices. Start using NTP. Or at least sync them to the same NTP source once. If you still have latency with ping do a cpstop / cpstart on each cluster member, then retry a ping.

Quote:
Originally Posted by vijayant View Post
Also let me tell you that 90 % of the traffic on this firewall is of some file upload. Either there is very low load or very high (15 Mb) that is the capacity of the internet link connected to this firewall.
Switch ports as I remember is statically configured.
Still check the switch port for interface errors. Its good that the firewall interfaces don't show erorrs. Are your sync interfaces directly attached with a cross over cable? Or are they attached to the same switch?

The other weird thing I noticed, and maybe this is to do with the version of CP. But when I do a "cphaprob stat" it shows my sync addresses using the non routables but your output didn't.

Quote:
# cphaprob stat

Cluster Mode: New High Availability (Active Up)


Number Unique Address Assigned Load State

1 (local) 192.168.1.1 100% Active
2 192.168.1.2 0% Standby
Can you verify that whatever interface contains 203.17.26.4 isn't set to sync as well? I'm using R65.
__________________
Its all in the documentation.
Reply With Quote