CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Clustering (Security Gateway HA and ClusterXL)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-12-20
Junior Member
 
Join Date: 2006-02-17
Posts: 4
Rep Power: 0
Morten has an average reputation (10+)
Default ClusterXL problem

Hi,

I have two SPLAT running NGX R62 and ClusterXL.

I have a problem with clusterXL.

When running 'cphaprob -a if', all interfaces have status disconnected, except the sync interface, this is on both modules.

[Expert@gate]# cphaprob -a if

Required interfaces: 1
Required secured interfaces: 1

eth0 Disconnected non sync(non secured), broadcast
eth1 Disconnected non sync(non secured), broadcast
eth2 UP sync(secured), broadcast
eth3 Disconnected non sync(non secured), broadcast
eth4 Disconnected non sync(non secured), broadcast
eth5 Disconnected non sync(non secured), broadcast

Multicast-traffic is running, and each module can see the multicast from the other module.

Has anyone got any idea what might be wrong?
Reply With Quote
  #2 (permalink)  
Old 2007-02-20
Junior Member
 
Join Date: 2007-02-19
Posts: 3
Rep Power: 0
sheriff has an average reputation (10+)
Default Re: ClusterXL problem

Mr. Morten, it is difficult to understand from your post - what kind of problem do you really have. Please, be more specific.
Reply With Quote
  #3 (permalink)  
Old 2007-02-21
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,670
Rep Power: 5
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: ClusterXL problem

Quote:
Originally Posted by Morten View Post
Multicast-traffic is running, and each module can see the multicast from the other module.

Has anyone got any idea what might be wrong?
Can you see the multicast traffic with a tcpdump -i?
Can you ping between interfaces?

Assuming the above is yes, try to lock the speed in the interfaces and switch ports. Autoneg is notorious for causing all sorts of strange problems (You would think that after 10 years it would work but...)
Reply With Quote
  #4 (permalink)  
Old 2007-03-08
Junior Member
 
Join Date: 2006-10-11
Location: Jamaica
Posts: 3
Rep Power: 0
tbennett has an average reputation (10+)
Send a message via MSN to tbennett
Default Re: ClusterXL problem

I agree with Sheriff your problem sounds very vague. I am tempted to ask you to check network connectivity for all interfaces. You need to give some more information about those interfaces. Are they all vlans?

I recommend you do some ifconfig and mii-tool to verify network connectivity of those interfaces.

Alternatively you can change from multicast to broadcast for CCP traffic.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 04:32.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0