CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
2. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
3. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Management High Availability
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-10-17
l0wkey l0wkey is offline
Junior Member
 
Join Date: 2006-05-11
Posts: 26
Rep Power: 0
l0wkey has an average reputation (10+)
Default NGX Primary HA active node hard lock

Hello, here is what we are seeing. We are running a HA cluster in active / passive and the active node will randomonly hang after a day or so. The passive picks up and becomes active with no issues. When the system locks it's a complete hard lock and you cannot even access the console. We then moved the passive node to active and it also locks up randomly and then the passieve (the old active) becomes active and he will eventually die as well. Here is our specs


Checkpoint NGX HFA04 running on SPLAT
SecureXL
Intel Quad Gig cards
HP DL380 servers

Any info would be appreciated
Reply With Quote
  #2 (permalink)  
Old 2006-10-17
Izzio Izzio is offline
Member
 
Join Date: 2006-04-07
Location: Penzberg, Germany
Posts: 40
Rep Power: 0
Izzio has an average reputation (10+)
Default Re: NGX Primary HA active node hard lock

I have had a similar experience with R61, SPLAT, SecureXL, HP380 and Intel Quad GT cards.
The primary member, after that the secondary was stopped for maintenance, is crashed (it runs about 48h) and the secondary is suddenly crashed three hours later.
Now after a sleepless night I have made a rollback to R55 on a Crossbeam platform. :-((

There is a CP article describing compability problems between secureXL and Broadcom NICs (2x on the MB of HP380), but only regarding R55 ...I think that this article must be updated!
Reply With Quote
  #3 (permalink)  
Old 2006-11-08
l0wkey l0wkey is offline
Junior Member
 
Join Date: 2006-05-11
Posts: 26
Rep Power: 0
l0wkey has an average reputation (10+)
Default Re: NGX Primary HA active node hard lock

Wow not fun man. Weird thing is we have this same configuration deployed in a few diffrent places, only seems to be having issues in one cluster.
Reply With Quote
  #4 (permalink)  
Old 2006-11-08
l0wkey l0wkey is offline
Junior Member
 
Join Date: 2006-05-11
Posts: 26
Rep Power: 0
l0wkey has an average reputation (10+)
Default Re: NGX Primary HA active node hard lock

As a update, we have moved the cluster to active / active in unicast mode. We still have the same lockups. One system will lock the other is fine, then after about 72 hours the other system will lock and the other will be fine, It just keeps round robin locking.
Reply With Quote
  #5 (permalink)  
Old 2006-11-08
Robby Cauwerts Robby Cauwerts is offline
Senior Member
 
Join Date: 2006-10-05
Location: Belgium
Posts: 108
Rep Power: 3
Robby Cauwerts has an average reputation (10+)
Default Re: NGX Primary HA active node hard lock

Did you search in /var/log/messages* for usefull information?
Reply With Quote
  #6 (permalink)  
Old 2006-11-08
l0wkey l0wkey is offline
Junior Member
 
Join Date: 2006-05-11
Posts: 26
Rep Power: 0
l0wkey has an average reputation (10+)
Default Re: NGX Primary HA active node hard lock

Quote:
Originally Posted by Robby Cauwerts View Post
Did you search in /var/log/messages* for usefull information?
Sure have it yields NOTHING. Checkpoint wants us to enable kernel debugging, but last time we did that, it caused alot more problems and did not yield any more information.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 16:26.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0