CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it again! He has just released the 2nd edition of "Max Power".
Rather than get into details here, I urge you to check out this announcement post.
It's a massive upgrade, and well worth checking out. -E

 

Results 1 to 2 of 2

Thread: Strange behavior on R77.20 cluster gateway SPLAT referer to cluster state

  1. #1
    Join Date
    2016-03-08
    Posts
    8
    Rep Power
    0

    Default Strange behavior on R77.20 cluster gateway SPLAT referer to cluster state

    Hello,
    I have a strange behavior on my cluster. I have a cluster in this state:

    [Expert@fw2]# cphaprob stat

    Cluster Mode: High Availability (Primary Up) with IGMP Membership

    Number Unique Address Assigned Load State

    2 (local) 192.168.217.2 100% Active

    [Expert@fw2]# fw ctl affinity -l
    eth2: CPU 0
    eth3: CPU 0
    eth4: CPU 0
    eth5: CPU 0
    eth0: CPU 0
    eth1: CPU 0
    fw_0: CPU 1
    fw_1: CPU 0
    The current license permits the use of CPUs 0, 1 only.

    [Expert@fw2]# fw ctl multik stat
    ID | Active | CPU | Connections | Peak
    ----------------------------------------------
    0 | Yes | 1 | 255 | 968
    1 | Yes | 0 | 270 | 811

    [Expert@fw2]# fw ctl affinity -l -r
    CPU 0: eth2 eth3 eth4 eth5 eth0 eth1
    fw_1
    CPU 1: fw_0
    CPU 2:
    CPU 3:
    All: fwd mpdaemon in.asessiond in.geod rtmd cpd cprid
    The current license permits the use of CPUs 0, 1 only.

    ------------------------------------------------

    [Expert@fw1]# cphaprob stat

    Cluster Mode: High Availability (Primary Up) with IGMP Membership

    Number Unique Address Assigned Load State

    1 (local) 192.168.217.1 0% Ready
    2 192.168.217.2 0% ClusterXL Inactive or Machine is Down

    (*) 'Ready' state might be caused due to configuration inconsistency between members:
    32bit/64bit/usermode, number of CoreXL instances or different SW version.

    [Expert@fw1]# fw ctl affinity -l
    eth2: CPU 0
    eth3: CPU 0
    eth4: CPU 0
    eth5: CPU 0
    eth0: CPU 0
    eth1: CPU 0
    fw_0: CPU 1
    fw_1: CPU 0
    fw_2: CPU 1
    The current license permits the use of CPUs 0, 1 only.

    [Expert@fw1]# fw ctl multik stat
    ID | Active | CPU | Connections | Peak
    ----------------------------------------------
    0 | Yes | 1 | 0 | 524
    1 | Yes | 0 | 3 | 571
    2 | Yes | 1 | 1 | 488

    [Expert@fw1]# fw ctl affinity -l -r
    CPU 0: eth2 eth3 eth4 eth5 eth0 eth1
    fw_1
    CPU 1: fw_0 fw_2
    CPU 2:
    CPU 3:
    All: in.geod in.asessiond mpdaemon fwd cprid cpd
    The current license permits the use of CPUs 0, 1 only.

    Checking the "Check Point CoreXL" configuration it's the same, 2 instances

    License are the same "cpsg-c-2-500 cpsb-fw" and "cpsg-c-2-500-ha cpsb-fw-ha"

    Version of CP and hardware are the same

    I follow the sk44488 and it's obvious that fw1 have 1 more instance of fw2 , but everything seems is configured ok.

    How can I investigate and solve this problem?

    Thanks
    Nicker

  2. #2
    Join Date
    2011-08-02
    Location
    http://spikefishsolutions.com
    Posts
    1,615
    Rep Power
    8

    Default Re: Strange behavior on R77.20 cluster gateway SPLAT referer to cluster state

    Clusterxl can’t sync members with different CoreXL configs like you’ve found. Should be all you need to do is run cpconfig and fix the number in the CoreXL configuration.

    Did you try that already?

Similar Threads

  1. Replies: 4
    Last Post: 2017-06-28, 09:16
  2. Cluster Behavior Issue
    By rmmagow in forum Clustering (Security Gateway HA and ClusterXL)
    Replies: 4
    Last Post: 2010-03-29, 22:14
  3. No traffic on Cluster Sync interface - Splat 2.6 Cluster XL HA
    By Xoron in forum Clustering (Security Gateway HA and ClusterXL)
    Replies: 11
    Last Post: 2009-02-17, 09:05
  4. Replies: 0
    Last Post: 2008-02-01, 22:19
  5. strange nat-problem with cluster
    By veste in forum Clustering (Security Gateway HA and ClusterXL)
    Replies: 13
    Last Post: 2006-07-13, 09:52

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •