CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Clustering (Security Gateway HA and ClusterXL)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-05-29
Member
 
Join Date: 2005-08-22
Posts: 54
Rep Power: 4
karimi has an average reputation (10+)
Default both cluster members show master - problem

hiya

hi, configured 2 new nokia IP390s for clustering -- (Ipso 4.1, NGX r60)

i config the primary, it says master, all is good - and on the secondary, i go "create cluster" give it the same clusterID as the primary (500) enter the cadmin passwd, and click JOIN - it does Join & pull down the cluster info with no errors, but i notice that it's state is master, not member, as the secondary should be!

I check the primary and it's a master as well. the 2 nokias are connected to each other through a hub..and NGX is not running & "Monitor VPN-1/FW-1:" is disabled- so nothing to block the boxes talking.. and by the way, when i log onto the cluster VIP ip and sign in as 'cadmin', i only see 1 cluster member, not both - i should be seeing "master" and then "member" - but i only see 1. something is weird.

any clues?

Last edited by karimi; 2007-05-29 at 16:36.
Reply With Quote
  #2 (permalink)  
Old 2007-05-30
Member
 
Join Date: 2005-08-22
Posts: 54
Rep Power: 4
karimi has an average reputation (10+)
Default Re: both cluster members show master - problem

seemed to have figured out the source of the problem.


If you only have 1 interface on each FW in the cluster, (aside from the interface you are configuring the FW from) the cluster status won't come up. It will stay at "initialized".

Adding a 2nd interface seemed to work.

Can anyone comment that it seems you need 2 separate interfaces on each FW member before the cluster will join?
Reply With Quote
  #3 (permalink)  
Old 2007-06-04
Junior Member
 
Join Date: 2006-10-19
Posts: 2
Rep Power: 0
gahsan has an average reputation (10+)
Default Re: both cluster members show master - problem

HI
As i remember you have to use minimum 2 interface in the Nokia IP clustering, where oe interface is dedicated to nokia cluter protocol.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 05:38.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0