topic Re: Checkpoint VRRP cluster in Firewall and Security Management

Checkpoint VRRP cluster

-K- — Fri, 18 Jun 2021 14:39:19 GMT

Hi All,

we have VRRP cluster enabled on the security gateways and would like to see when VRRP flap occurred and state has been changed from Master to Backup. (which specific keywords to look /var/log/messages) i tried to look for "down,state,change,master" but not so clear about that.

Also, is there any ways we can check VRRP status for specific gateway that when the last failover/state change occured and since when VRRP state is UP and no failover happened.

Any pointer please.

Re: Checkpoint VRRP cluster

PhoneBoy — Fri, 18 Jun 2021 21:32:09 GMT

I believe the clish command show vrrp interfaces will show you what you’re after.

Re: Checkpoint VRRP cluster

Vladimir — Sat, 19 Jun 2021 03:24:07 GMT

Going forward, I'd suggest enabling "Send Syslog messages to management server" in Gaia as well as SNMP traps for VRRP, if you have an SNMP platform in place.

Re: Checkpoint VRRP cluster

the_rock — Sun, 20 Jun 2021 11:25:49 GMT

Are you looking for specific alert to be sent when this happens?

Re: Checkpoint VRRP cluster

-K- — Mon, 21 Jun 2021 07:28:27 GMT

Mainly i would like to understand one of the box which is in Master state is in master state since how long..?

when it was last flapped

Re: Checkpoint VRRP cluster

the_rock — Mon, 21 Jun 2021 10:16:28 GMT

cphaprob state

Re: Checkpoint VRRP cluster

PhoneBoy — Mon, 21 Jun 2021 20:56:40 GMT

That doesn't work for VRRP since ClusterXL is only used for sync in that case.
The command I provided (show vrrp interfaces) will tell you when the last state change occurred.

Re: Checkpoint VRRP cluster

the_rock — Mon, 21 Jun 2021 21:45:30 GMT

You are absolutely right, I did not think of that : )

Re: Checkpoint VRRP cluster

-K- — Tue, 22 Jun 2021 09:21:43 GMT

Thank for your input.

Are we talking about Time since transition: xxxxxx entry right. i believe its in seconds.

Re: Checkpoint VRRP cluster

PhoneBoy — Tue, 22 Jun 2021 14:35:38 GMT

That's the one, and it is in seconds.