CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
2. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
3. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Clustering (Security Gateway HA and ClusterXL)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-04-26
Izzio Izzio is offline
Member
 
Join Date: 2006-04-07
Location: Penzberg, Germany
Posts: 40
Rep Power: 0
Izzio has an average reputation (10+)
Default ClusterXL long switching time by failover

Hello!

I'm setting ClusterXL in Hot Standby new mode on SPLAT R55 HFA13 over 2 Cisco 3750 switches. Everything works fine but by a failover the switching time is relatively long: about 1 minute!
I know from previous installations that normally should be no more than 10sec.

Hat somebody any idea?

Thanks
Maurizio
Reply With Quote
  #2 (permalink)  
Old 2006-04-26
luisrocha luisrocha is offline
Junior Member
 
Join Date: 2006-04-19
Posts: 26
Rep Power: 0
luisrocha has an average reputation (10+)
Default Re: ClusterXL long switching time by failover

How is formed the MAC of the Cluster ? could be the gratious arp is not been accepted by the switches has sould be......
Reply With Quote
  #3 (permalink)  
Old 2006-04-26
Izzio Izzio is offline
Member
 
Join Date: 2006-04-07
Location: Penzberg, Germany
Posts: 40
Rep Power: 0
Izzio has an average reputation (10+)
Default Re: ClusterXL long switching time by failover

In HA (Hot standby) mode the Cluster IP MAC = Active Member MAC (e.g.: 00:16:35:06:1F:33)

In Load Sharing a Mcast MAC is used.

In both cases the failover switching takes about 1 minute.

Thanks,
Maurizio
Reply With Quote
  #4 (permalink)  
Old 2006-04-26
Izzio Izzio is offline
Member
 
Join Date: 2006-04-07
Location: Penzberg, Germany
Posts: 40
Rep Power: 0
Izzio has an average reputation (10+)
Default Re: ClusterXL long switching time by failover

The problem was probably not a real problem ;-)
...and anyway has concerned just only ping to cluster IP.

Adding following line:

fw_allow_simultaneous_ping=1

to $FWDIR/boot/modules/fwkern.conf is everything ok!

See also another post in this forum for details.

Ciao
Maurizio
Reply With Quote
  #5 (permalink)  
Old 2006-04-26
FERappel FERappel is offline
Junior Member
 
Join Date: 2006-03-30
Location: Rio de Janeiro, RJ, Brasil
Posts: 8
Rep Power: 0
FERappel has an average reputation (10+)
Default Re: ClusterXL long switching time by failover

Up to 50 s? If so, it may be spanning tree. Did you set "port fast"?
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 01:32.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0