CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA or CCSE One-Week Certification Training Courses with CPUG in Beautiful San Francisco!
    Courses Starting (2010) 4/12, 5/10, 6/7, 7/12.
2. Save the Date!  CPUG CON 2010 EUROPE, the User Conference in Switzerland, September 20th-22nd, 2010!
3. Join Our CPUG Groups On LinkedIn, Facebook, and Ning.  See Our Channel on YouTube.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Clustering (Security Gateway HA and ClusterXL)
Register Projects FAQ Members List Social Groups Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2009-07-08
Junior Member
 
Join Date: 2009-03-17
Posts: 3
Rep Power: 0
memory_kai has an average reputation (10+)
Default Cluster states is ready

Ready State Can occur in following scenarios:
1. When a cluster is upgraded from one version of
VPN-1 to another, and the cluster members have
different versions of VPN-1, the members with a
new version have the ready state and the
members with the previous version have the
active state.
2. Before a cluster member becomes active, it
sends a message to the rest of the cluster, and
then expects to receive confirmations from the
other cluster members agreeing that it will
become active. In the period of time before it
receives the confirmations, the machine is in the
ready state.


the two modules have same version, the version is R70(Secureplatform+Hp 380G5), When i'm run "cphaprob stat" command, The output one modules cluster states is active ,but another modules's state is Ready, the two modules Cluster mode:New High Availability is (Primary up ) ; no at the active up mode

I think, tow modules to deem itself is Active , So one module will not receive confirmations from the other cluster members agreeing ,So how can I definition the module's Cluster priority in $FWDIR/CONF/CPHA.CONF

Thinks
Reply With Quote
  #2 (permalink)  
Old 2009-07-09
Senior Member
 
Join Date: 2006-12-04
Posts: 233
Rep Power: 4
serlud has an average reputation (10+)
Default Re: Cluster states is ready

Quote:
Originally Posted by memory_kai View Post
Ready State Can occur in following scenarios:
1. When a cluster is upgraded from one version of
VPN-1 to another, and the cluster members have
different versions of VPN-1, the members with a
new version have the ready state and the
members with the previous version have the
active state.
2. Before a cluster member becomes active, it
sends a message to the rest of the cluster, and
then expects to receive confirmations from the
other cluster members agreeing that it will
become active. In the period of time before it
receives the confirmations, the machine is in the
ready state.


the two modules have same version, the version is R70(Secureplatform+Hp 380G5), When i'm run "cphaprob stat" command, The output one modules cluster states is active ,but another modules's state is Ready, the two modules Cluster mode:New High Availability is (Primary up ) ; no at the active up mode

I think, tow modules to deem itself is Active , So one module will not receive confirmations from the other cluster members agreeing ,So how can I definition the module's Cluster priority in $FWDIR/CONF/CPHA.CONF

Thinks
You can simple change module's Cluster priority in SmartDashboar -> edit Cluster Object > Cluster members > increase or decrease Priority..
Reply With Quote
  #3 (permalink)  
Old 2009-07-09
Junior Member
 
Join Date: 2009-03-17
Posts: 3
Rep Power: 0
memory_kai has an average reputation (10+)
Default Re: Cluster states is ready

I'm do it, but in the monitor , the gaterway's states still Ready

and i'm edit the Maintain current active Cluster Member to Swith to higher priority Cluster Member but do not change the states


hao can i debug the cluster informations

Thanks
Reply With Quote
  #4 (permalink)  
Old 2009-07-09
Senior Member
 
Join Date: 2007-07-16
Posts: 1,873
Rep Power: 4
Thorpuse has an average reputation (10+)
Default Re: Cluster states is ready

This means either that SIC states aren't set correctly, or there's an incompatibility in the versions of the cluster members. Check on both cluster members and in the dashboard that all objects have been updated correctly, and that all versions, patches and hotfixes are equal.
Reply With Quote
  #5 (permalink)  
Old 2009-07-29
Member
 
Join Date: 2005-11-25
Location: Not of this world
Posts: 33
Rep Power: 0
alienbaby has an average reputation (10+)
Default Re: Cluster states is ready

I believe I've seen this when the topology config had an error. I had typo'd the third octet in one of the ip addresses.
Reply With Quote
  #6 (permalink)  
Old 2009-09-16
Member
 
Join Date: 2008-04-17
Posts: 34
Rep Power: 0
n1troboy has an average reputation (10+)
Default Re: Cluster states is ready

did you ever find a solution for this?
Reply With Quote
  #7 (permalink)  
Old 2009-09-29
Junior Member
 
Join Date: 2008-06-06
Posts: 18
Rep Power: 0
sass99 has an average reputation (10+)
Default Re: Cluster states is ready

i've had same situation then on one of the cluster members CoreXL was enabled but not on second one or ammount of cores allocated to FWD is different on members;You can check it via cpconfig or even using "fw ctl multik stat" .
Br,
alec
Reply With Quote
  #8 (permalink)  
Old 2009-10-01
Senior Member
 
Join Date: 2009-04-14
Location: Ottawa, Ontario, Canada
Posts: 184
Rep Power: 1
plamy has an average reputation (10+)
Default Re: Cluster states is ready

Ready is seen when using VRRP + R70, or another hot standby config. This is new in R70. It simply means that it is working and set to take over if needed.

-Pierre
Reply With Quote
Reply

Tags
ready

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 13:53.


Powered by vBulletin® Version 3.8.5
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.3.2