CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have sign-ups from twelve different countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 7/14, 8/25, 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Clustering (Security Gateway HA and ClusterXL)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-05-12
venkatnarayana venkatnarayana is offline
Member
 
Join Date: 2007-08-29
Posts: 34
Rep Power: 0
venkatnarayana has an average reputation (10+)
Default external interface ip showing as LOCAL

HI all

i have R62 splat installed on dell servers, running on HA mode. now the problem is HA is not working. when i run cphaprob stat on the machine having problem, it shows the external interface ip address as local.

i get the following error

local 192.168.10.5 ------> this is the external interface having public ip

10.10.30.5 --------> this is the internal interface

iam wondering why is the external interface indicating as local. also it says cluster xl is down or cannot communicate.

regards
venkat
Reply With Quote
  #2 (permalink)  
Old 2008-05-13
melipla melipla is offline
Senior Member
 
Join Date: 2006-01-25
Posts: 724
Rep Power: 3
melipla has an average reputation (10+)
Default Re: external interface ip showing as LOCAL

If your external interface topology is not set to "Cluster + # Sync" then I would not expect the external address to show up as the "local" address for the cphaprob stat--it should be the Sync IP that you see. [The local part just indicates which cluster member you ran the cphaprob comman on]

Check the topology and set up of the "1st Sync" interface, both in the cluster object and on each network interface of the cluster members. Also check "cphaprob -a if" on each cluster member to make sure they have the same number of interfaces up.
__________________
Its all in the documentation.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 06:18.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0