CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it again! He has just released the 2nd edition of "Max Power".
Rather than get into details here, I urge you to check out this announcement post.
It's a massive upgrade, and well worth checking out. -E

 

Results 1 to 6 of 6

Thread: Which would be the CLI command to show full cluster synchronization status?

  1. #1
    Join Date
    2009-09-06
    Posts
    6
    Rep Power
    0

    Default Which would be the CLI command to show full cluster synchronization status?

    Which would be the CLI command to show full cluster synchronization status? a) cphaprob -i list

    Extract from the command output :
    Device Name: Synchronization
    Registration number: 3
    Timeout: none
    Current state: OK
    Time since last report: 1.538e+06 sec

    or

    b) fw ctl pstat
    Extract from the command output
    Sync:
    Version: new
    Status: Able to Send/Receive sync packets
    Sync packets sent:
    total : 3466498, retransmitted : 1083, retrans reqs : 12, acks : 81800
    Sync packets received:
    total : 6691970, were queued : 20, dropped by net : 12
    retrans reqs : 68, received 78455 acks
    retrans reqs for illegal seq : 0
    dropped updates as a result of sync overload: 0
    Callback statistics: handled 78175 cb, average delay : 1, max delay : 2

    or
    c) some other command? what will the command be?

  2. #2
    Join Date
    2009-09-06
    Posts
    6
    Rep Power
    0

    Default Re: Which would be the CLI command to show full cluster synchronization status?

    Sorry, I didn't actually phrase the question properly. Here it goes...

    Which of the following commands shows full synchronization status?
    a) cphaprob -i list
    b) cphastop
    c) fw ctl pstat
    d) cphaprob -a if
    e) fw hastat

    I'm not too sure which is the right answer. Could be Either A or C.

  3. #3
    Join Date
    2006-01-25
    Location
    Americas
    Posts
    1,535
    Rep Power
    15

    Default Re: Which would be the CLI command to show full cluster synchronization status?

    Quote Originally Posted by blue1ce View Post
    Could be Either A or C.
    I'd go with C, as it has the most information regarding sync & would be where you'd go to identify if you're having sync issues (per the clusterxl troubleshooting steps referenced in the clusterxl admin guide).
    Its all in the documentation.

  4. #4
    Join Date
    2009-09-06
    Posts
    6
    Rep Power
    0

    Default Re: Which would be the CLI command to show full cluster synchronization status?

    Thank you for highlighting it, i found it in the documentation.

  5. #5
    Join Date
    2006-10-03
    Location
    Offenbach/ Germany
    Posts
    170
    Rep Power
    13

    Default Re: Which would be the CLI command to show full cluster synchronization status?

    There is another command, which seems to be very useful in practice:

    cpstat fw -f sync -o 1

    With this, the Sync status will automatically be updated every second (hence -o 1).

    You have to check it on all the cluster members, of course!

    Yasushi

  6. #6
    Join Date
    2006-12-16
    Posts
    539
    Rep Power
    13

    Default Re: Which would be the CLI command to show full cluster synchronization status?

    Quote Originally Posted by blue1ce View Post
    Sorry, I didn't actually phrase the question properly. Here it goes...

    Which of the following commands shows full synchronization status?
    a) cphaprob -i list
    b) cphastop
    c) fw ctl pstat
    d) cphaprob -a if
    e) fw hastat

    I'm not too sure which is the right answer. Could be Either A or C.


    C is the answer

Similar Threads

  1. show route destination command
    By EdinburghKev in forum Check Point SecurePlatform (SPLAT)
    Replies: 7
    Last Post: 2011-04-11, 03:52
  2. Command to show topology of Check Point Objects
    By danjun in forum Security Management Server (Formerly SmartCenter Server ((Formerly Management Server))
    Replies: 3
    Last Post: 2010-05-26, 10:31
  3. CLI Command for HA Status
    By SecPuh in forum Management High Availability
    Replies: 3
    Last Post: 2009-10-15, 05:21
  4. Full sync status Question
    By pat13b in forum CCSA NGX Exam 156-215.1 (No Longer Offered)
    Replies: 3
    Last Post: 2007-08-30, 05:47
  5. Show date/time and cwd in command prompt
    By affinityhb in forum Miscellaneous
    Replies: 5
    Last Post: 2006-11-15, 09:47

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •