topic Re: Cluster XL gateway states in Firewall and Security Management

Cluster XL gateway states

praveshnayal — Mon, 10 Aug 2020 15:24:23 GMT

If the cluster link goes down in case of active/standby deployment.

1)What will be the states of each gateway in cphaprob stat?

2) Also if there is another link connected between the firewalls via switch either (LAN to LAN or WAN to WAN) ;

will CCP be sent between the firewalls from the LAN to LAN /WAN to WAN side connected links on the switch.

Re: Cluster XL gateway states

Timothy_Hall — Mon, 10 Aug 2020 18:11:03 GMT

When you say "cluster link" I assume you mean the sync network between the cluster members. If that link is unplugged the State Sync pnote will fail indicating an impairment on both members. Assuming the members can still see each other's CCP traffic through at least one other clustered interface, the members will not split-brain in this case and whichever firewall was Active will continue to pass traffic but in Active Attention (!) mode. I think the standby member will show a Down state, but will immediately go Active Attention (!) if something happens to the currently-active member. This all assumes that the cluster was in a proper Active/Standby state to begin with and there are no other pnote failures.

Re: Cluster XL gateway states

praveshnayal — Mon, 24 Aug 2020 08:13:26 GMT

Thanks for the brief explanation Timothy. Is there any specific SK for such type of cluster XL states query.

Re: Cluster XL gateway states

Martin_Raska — Mon, 24 Aug 2020 08:26:18 GMT

Search for CLusterXL admin guide or ClusterXL cheat sheet in this forum.