topic Re: CLUSTER GATEWAY STATUS in Cloud Firewall

CLUSTER GATEWAY STATUS

siddu099 — Thu, 28 Aug 2025 11:10:23 GMT

Hi Team,

We are using R81.20 hotfix 99 gateways
in HA cluster

we can see that the primary gateway only can reach internet but secondary not able to reach internet
for that secondary gateway status always shows down red

Re: CLUSTER GATEWAY STATUS

Edan_Leventhal — Thu, 28 Aug 2025 11:21:18 GMT

Hi siddu099,

Is this a cluster on the cloud? if so what vendor and what type of cluster.
If it's a cloud gateway I would open a ticket with the vendor to check why we have no internet connectivity.

Otherwise, if this is an on-prem machine, it is possible return traffic is coning back via the active member but dropping on the way. I would suggest to run a traffic capture on the active member to see if we are seeing the relevant connection there. you can find more info in related to this with the following SKs:
sk107432 - Traffic originated by the Standby cluster member does not work
sk167453 - Traffic from the Standby member to any other host goes through the SYNC interface

Re: CLUSTER GATEWAY STATUS

siddu099 — Wed, 10 Sep 2025 12:04:42 GMT

Hi Team,

We resolve the issue by executing this command on both GW

#fw ctl set -f int fwha_silent_standby_mode 1
#fw ctl set -f int ccl_force_use_ccp 1

Re: CLUSTER GATEWAY STATUS

the_rock — Wed, 10 Sep 2025 12:17:15 GMT

Excellent, thanks for letting us know.

Andy