CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have 52 attendees signed up from 14 countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 8/25, 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 Platforms > Nokia And IPSO
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-05-04
klouse klouse is offline
Junior Member
 
Join Date: 2006-05-04
Posts: 14
Rep Power: 0
klouse has an average reputation (10+)
Default Manually failover VRRP via CLI

Is there a CLI command to manually create failover? Or change priority?

When it comes time to change priority – currently the master is at 100 and Backup is at 90

What would be the correct way to set the current master to backup and backup to master? Without creating to much havoc.


Thank you,
Alan
Reply With Quote
  #2 (permalink)  
Old 2006-05-25
jparnell jparnell is offline
Junior Member
 
Join Date: 2006-05-25
Posts: 6
Rep Power: 0
jparnell has an average reputation (10+)
Default Re: Manually failover VRRP via CLI

Hi,
I'm also interested in knowing the answer to this. Is anyone able to advise?

Thanks
Reply With Quote
  #3 (permalink)  
Old 2006-05-25
fraserj fraserj is offline
Junior Member
 
Join Date: 2006-02-27
Posts: 5
Rep Power: 0
fraserj has an average reputation (10+)
Default Re: Manually failover VRRP via CLI

Try shutting down the external interface - this should cause the priority to drop by the delta value and cause the other firewall to become primary.
Reply With Quote
  #4 (permalink)  
Old 2006-05-26
klouse klouse is offline
Junior Member
 
Join Date: 2006-05-04
Posts: 14
Rep Power: 0
klouse has an average reputation (10+)
Default Re: Manually failover VRRP via CLI

Well here is the non-messy way:

We have two Nokia’s - the delta value is 10

Master is 100 and Backup is at 90
Log into the backup Nokia via voyager and set the Priority to 110 – the backup is now the master.

I was looking for a very fast and dirty way of configuring master / backup while consoled.

I suppose Lynx is the best way to go in this situation


Klouse
Reply With Quote
  #5 (permalink)  
Old 2006-06-08
Lackie Lackie is offline
Senior Member
 
Join Date: 2005-08-22
Location: Ottawa, Canada
Posts: 347
Rep Power: 4
Lackie has an average reputation (10+)
Default Re: Manually failover VRRP via CLI

If you are running simplifed vrrp, you can change the priority with the following CLISH command.

set mcvr vrid <1-255> priority <1-254>

Legacy is harder because there are different vrid's on each interface, so you may hve to repeat the below command for all interfaces/vrids.

set vrrp interface if_name virtual-router backup-vrid <1-255> priority <1-254>

Remember these commands require you either going into the clish shell by typing clish or running the command as such from the regular command prompt.

clish -c "cli_command"
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 03:45.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0