Sync problem

[pedroboavida]

Hi,

I have a (hot-standby) cluster of firewalls running Checkpoint NG FP2 on Sun Solaris with Sync only. The cluster part is done by a third party software. In cpconfig the cluster xl/state sync is activated and when I run "cpstat ha" I get the following output:

Product name: High Availability
Version: NG Feature Pack 2
Status: problem
HA installed: 1
Working mode: Sync only
HA started: yes

I have a secured interface where state sync is done and the cluster object at the management use precisely this network to do state sync.

If I run the "cphastart -d" command I get the following output:

[ 736]@fw-node1 ha_fetch_callback: could not take fail over track mode from cluster. continue anyway /opt/CPfw1-50/bin/cphaconf clear-secured /opt/CPfw1-50/bin/cphaconf clear-disconnected
/opt/CPfw1-50/bin/cphaconf -i 1 -n 30 -c 2 -m 1 -l 0 -t sbif0 -p 1172575817 -b 1085418207 start

Any clues ?

Thanks in advance,

PB

[NickBrandson]

Persoally, I don't think the cphastart or alike would work for "Syn-only" environment.

Possibly it is misconfigured your "3rd party" Cluster/HA solution

Consult SB or Rain SE for details.

Actually, it is recommended to "upgrade" to ClusterXL instead, i think both OPSEC-Cluster vendors are cutting the support for the products anymore.