topic Re: VSX Cluster Behavior on Standby VS in Firewall and Security Management

VSX Cluster Behavior on Standby VS

Michalis89 — Fri, 08 Oct 2021 10:27:53 GMT

Hi,

I was troubleshooting an issue today at my work where we used Checkpoint VSX Configuration with VSLS High Availability mode.

The VSX cluster consists of two gateways.

During the troubleshoot i saw that both VS's (at both Active and Standby Firewall) have arp entries for the same network. Furthermore, they do not even have the same arp entries for a specific network. For example some host are hitting the standby VS and some other hosts are hitting the active VS.

Why is this happening;;

During normal operation i think that all the arp entries must be alive only at the Active VS.

Re: VSX Cluster Behavior on Standby VS

PhoneBoy — Sun, 10 Oct 2021 23:52:29 GMT

What version/JHF level?
Perhaps this also applies: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk94564

Re: VSX Cluster Behavior on Standby VS

_Val_ — Mon, 11 Oct 2021 07:23:24 GMT

Did you experience a failover before troubleshooting started?

Re: VSX Cluster Behavior on Standby VS

Michalis89 — Tue, 12 Oct 2021 20:01:28 GMT

Thank you Val for your answer. No we did not make any failover recently.

Re: VSX Cluster Behavior on Standby VS

_Val_ — Wed, 13 Oct 2021 06:50:17 GMT

Then best is to take it with TAC. Please raise an SR