CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
2. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
3. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Clustering (Security Gateway HA and ClusterXL)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-01-27
Trealex Trealex is offline
Junior Member
 
Join Date: 2007-01-27
Posts: 1
Rep Power: 0
Trealex has an average reputation (10+)
Default an unexpected reboot

I am having a problem with a cluster, R60 + hfa03 + hotfix 603 running on two HP DL380.
The cluster reported member1 was down. After that member2 was unavailable too.

Looking at the /var/log/messages-all members did an unexpected reboot:
Logs on member1:
Dec 16 15:17:56 cpngx1 syslogd 1.4.1: restart.
Dec 16 15:18:08 cpngx1 kernel: eth0: HP NC7782 Gigabit Server Adapter found at mem fddf0000, IRQ 25, node addr 001279cf6255
Dec 16 15:18:08 cpngx1 kernel: eth1: HP NC7782 Gigabit Server Adapter found at mem fdde0000, IRQ 26, node addr 001279cf6254
Dec 16 15:18:20 cpngx1 kernel: CPHA: failed to add multicast MAC address - not enough memory
Dec 16 15:18:26 cpngx1 cpboot:
Dec 16 15:18:26 cpngx1 cpboot: Installing Security Policy Police_for_CA_Firewall_1 on all.all@cpngx1
Dec 16 15:18:26 cpngx1 kernel: FW-1: Warning: Interface eth0 is defined but not currently present
Dec 16 15:18:26 cpngx1 kernel: FW-1: Warning: Interface eth1 is defined but not currently present
Dec 16 15:18:34 cpngx1 cpboot: Fetching Security Policy from localhost succeeded Next reboot solved the problem. Cluster has two members: cpngx1 and cpngx2. eth0 - LAN eth1 - WAN It's onboard Broadcom interfaces eth2 - sync, Intel additional card. SmartCenter on different machine into the LAN No instructions. No additional info.

Error Message(s):
cluster_info: (ClusterXL) member 1 (10.10.10.1) is down.
cluster_info: (ClusterXL) member 2 (10.34.1.236) is down (Interface Active Check on member 2 (10.34.1.236) detected a problem (3 interfaces required, only 2 up).).

cluster_info: (ClusterXL) interface eth2 of member 2 (10.34.1.236) is down (receive up, transmit down)
cluster_info: (ClusterXL) interface eth2 of member 2 (10.34.1.236) is down (receive down, transmit down)

So, both members got an unexpected reboot. But worst of all that both nodes do not comes up after unexpected reboot. I have to manualy reboot them. After manul reboot everything goes up.

Does somebody had the same problem?
Any ideas would be appreciated!
Reply With Quote
  #2 (permalink)  
Old 2007-02-14
oronge1i oronge1i is offline
Junior Member
 
Join Date: 2007-01-31
Posts: 1
Rep Power: 0
oronge1i has an average reputation (10+)
Default Re: an unexpected reboot

Is the SecureXL enable, try disabling SecureXL if not using.
Reply With Quote
  #3 (permalink)  
Old 2007-02-14
Rubinho Rubinho is offline
Junior Member
 
Join Date: 2007-02-12
Posts: 2
Rep Power: 0
Rubinho has an average reputation (10+)
Default Re: an unexpected reboot

I have encountered very similar problem as well. Unfortunately, I've also been unable to solve this problem. Even after SPLAT reinstallations and hardware changes. How often does your system freeze unexpectedly?
Reply With Quote
  #4 (permalink)  
Old 2007-02-15
kva.kva kva.kva is offline
Senior Member
 
Join Date: 2006-01-26
Location: Moscow, Russia
Posts: 706
Rep Power: 3
kva.kva has an average reputation (10+)
Default Re: an unexpected reboot

May be problem with drivers for NIC. Try to install last HFA, it contains new drivers for some NICs.
Reply With Quote
  #5 (permalink)  
Old 2007-02-20
sheriff sheriff is offline
Junior Member
 
Join Date: 2007-02-19
Posts: 3
Rep Power: 0
sheriff has an average reputation (10+)
Default Re: an unexpected reboot

Mr Rubinho, you wanna say that you had several unexpectable reboots? I would like to talk via e-mail with you, if you don't mind. Occasionally, some of our IT-managers distrusted CP as stable firewall after our cluster fail.
Reply With Quote
  #6 (permalink)  
Old 2007-02-20
sheriff sheriff is offline
Junior Member
 
Join Date: 2007-02-19
Posts: 3
Rep Power: 0
sheriff has an average reputation (10+)
Default Re: an unexpected reboot

Mr. oronge1i, what do you mean "if not using"? AFAIK, "SecureXL" license give to you possibility of using multy-proceccor nodes, so, what is the point?
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 11:24.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0