CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it again! He has just released the 2nd edition of "Max Power".
Rather than get into details here, I urge you to check out this announcement post.
It's a massive upgrade, and well worth checking out. -E

 

Results 1 to 4 of 4

Thread: adding/configuring interface causing error in cluster setup - policy error

  1. #1
    Join Date
    2017-09-21
    Posts
    39
    Rep Power
    0

    Default adding/configuring interface causing error in cluster setup - policy error

    On a cluster firewall with VRRP , I have tried to configure one of the interfaces on the firewall , when I first tried with get topology but could not get the correct topology,
    I have configured it on the active firewall of the cluster but when I installed the policy *I am getting below error


    Installation Targets Version Policy Type Details
    NEWYORK-CLUSTER R77.30 Network Security The Topology information must be configured for object newyorkfw1, interface eth6, in order to use the selected features.
    NEWYORK-CLUSTER R77.30 Network Security Failed to generate the rulebase
    NEWYORK-CLUSTER R77.30 Network Security Operation ended with errors.
    NEWYORK-CLUSTER R77.30 Network Security Operation ended with errors.

  2. #2
    Join Date
    2017-09-21
    Posts
    39
    Rep Power
    0

    Default Re: adding/configuring interface causing error in cluster setup - policy error

    any suggestions

  3. #3
    Join Date
    2008-07-31
    Location
    Netherlands, Europe
    Posts
    1,139
    Rep Power
    12

    Default Re: adding/configuring interface causing error in cluster setup - policy error

    You should collect the members info from the 2 gateways and manually add the cluster interface information and topology, on the cluster interfaces, on the sync interfaces you need to set the topology on the interfaces themselves.
    Regards, Maarten.
    Triple MDS on R77.30, MDS on R80.10, VSX, GAIA.

  4. #4
    Join Date
    2017-09-21
    Posts
    39
    Rep Power
    0

    Default Re: adding/configuring interface causing error in cluster setup - policy error

    Quote Originally Posted by msjouw View Post
    You should collect the members info from the 2 gateways and manually add the cluster interface information and topology, on the cluster interfaces, on the sync interfaces you need to set the topology on the interfaces themselves.
    thank you, all sorted

Similar Threads

  1. IPS update to 632120566 and policy compilcation error on VSX NGX Cluster.
    By serlud in forum IPS Blade (Formerly SmartDefense)
    Replies: 0
    Last Post: 2012-01-27, 04:59
  2. Nokia VRRP Cluster error: Get interface operation failed for IP address
    By avilT in forum Check Point IP Appliances and IPSO (Formerly Sold By Nokia)
    Replies: 0
    Last Post: 2011-08-29, 22:46
  3. Adding Interface to Existing Cluster
    By manuadoor in forum Check Point SecurePlatform (SPLAT)
    Replies: 5
    Last Post: 2010-06-18, 09:04
  4. NGX R61 Adding New interface drops Cluster
    By Kurgen727 in forum Clustering (Security Gateway HA and ClusterXL)
    Replies: 1
    Last Post: 2008-02-03, 00:06
  5. Problems with Cluster XL after adding new interface
    By erobinson in forum Clustering (Security Gateway HA and ClusterXL)
    Replies: 3
    Last Post: 2006-06-19, 21:25

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •