topic Checkpoint Standby Cluster is using VIP to communicate with outside in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-Standby-Cluster-is-using-VIP-to-communicate-with/m-p/25966#M2033 <HTML><HEAD></HEAD><BODY><P>Hello Guys,</P><P></P><P>We have a checkpoint 15400 appliance clustered and we are having an issue with the standby cluster member.</P><P></P><UL><LI>We cannot ping our default gateway from the standby member but we can ping the same with our active member.</LI></UL><P></P><P>We noticed that our standby cluster member is using the virtual IP to communicate with outside instead of its own IP</P><P></P><P><STRONG>Note: </STRONG><EM>This issue started yesterday earlier it was working fine .</EM></P><P></P><P>Any way to resolve this?</P><P></P><P>Thanks in advance.</P></BODY></HTML> Fri, 25 May 2018 05:52:30 GMT Shehan_Wickrama 2018-05-25T05:52:30Z Checkpoint Standby Cluster is using VIP to communicate with outside https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-Standby-Cluster-is-using-VIP-to-communicate-with/m-p/25966#M2033 <HTML><HEAD></HEAD><BODY><P>Hello Guys,</P><P></P><P>We have a checkpoint 15400 appliance clustered and we are having an issue with the standby cluster member.</P><P></P><UL><LI>We cannot ping our default gateway from the standby member but we can ping the same with our active member.</LI></UL><P></P><P>We noticed that our standby cluster member is using the virtual IP to communicate with outside instead of its own IP</P><P></P><P><STRONG>Note: </STRONG><EM>This issue started yesterday earlier it was working fine .</EM></P><P></P><P>Any way to resolve this?</P><P></P><P>Thanks in advance.</P></BODY></HTML> Fri, 25 May 2018 05:52:30 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-Standby-Cluster-is-using-VIP-to-communicate-with/m-p/25966#M2033 Shehan_Wickrama 2018-05-25T05:52:30Z Re: Checkpoint Standby Cluster is using VIP to communicate with outside https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-Standby-Cluster-is-using-VIP-to-communicate-with/m-p/25967#M2034 <HTML><HEAD></HEAD><BODY><P>I would suggest to try&nbsp;<SPAN style="color: #000000; border: 0px; font-weight: bold;"><STRONG><CODE style="border: 0px; font-weight: inherit;">fwha_forw_packet_to_not_active</CODE></STRONG></SPAN>, a magical parameter:</P><P><A href="https://community.checkpoint.com/thread/6771">Problem accessing standby cluster member from non-local network</A>&nbsp;</P><P></P><P><SPAN style="color: #333333; background-color: #ffffff;">Try with just entering&nbsp;</SPAN><SPAN style="border: 0px; background-color: #ffffff; color: #000000; font-weight: inherit;"><EM style="border: 0px; font-weight: inherit; font-size: 13px;"><STRONG># fw ctl set int fwha_forw_packet_to_not_active 1&nbsp;</STRONG></EM></SPAN><SPAN style="background-color: #ffffff; border: 0px;">on both nodes, and if it hepls, enable on permanent basis in&nbsp;<SPAN style="border: 0px; font-weight: bold; font-size: 13px;"><STRONG>fwkern.conf</STRONG></SPAN>.</SPAN></P></BODY></HTML> Fri, 25 May 2018 13:29:51 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-Standby-Cluster-is-using-VIP-to-communicate-with/m-p/25967#M2034 AlekseiShelepov 2018-05-25T13:29:51Z Re: Checkpoint Standby Cluster is using VIP to communicate with outside https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-Standby-Cluster-is-using-VIP-to-communicate-with/m-p/25968#M2035 <HTML><HEAD></HEAD><BODY><P>Hey did that in the first place didn't workout. Any other suggestions? </P></BODY></HTML> Sun, 27 May 2018 05:09:32 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-Standby-Cluster-is-using-VIP-to-communicate-with/m-p/25968#M2035 Shehan_Wickrama 2018-05-27T05:09:32Z Re: Checkpoint Standby Cluster is using VIP to communicate with outside https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-Standby-Cluster-is-using-VIP-to-communicate-with/m-p/25969#M2036 <HTML><HEAD></HEAD><BODY><P>try this&nbsp;<A href="https://community.checkpoint.com/message/13629-re-problem-accessing-standby-cluster-member-from-non-local-network" target="_blank">https://community.checkpoint.com/message/13629-re-problem-accessing-standby-cluster-member-from-non-local-network</A>&nbsp;</P></BODY></HTML> Fri, 21 Jun 2019 09:14:00 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-Standby-Cluster-is-using-VIP-to-communicate-with/m-p/25969#M2036 Kaspars_Zibarts 2019-06-21T09:14:00Z Re: Checkpoint Standby Cluster is using VIP to communicate with outside https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-Standby-Cluster-is-using-VIP-to-communicate-with/m-p/25970#M2037 <HTML><HEAD></HEAD><BODY><P>Thank you for replying <STRONG><SPAN class=""><A _jive_internal="true" class="" data-userid="45132" data-username="aleks65d64154-3014-4796-9c66-6b9f4aeee8e8" href="https://community.checkpoint.com/people/aleks65d64154-3014-4796-9c66-6b9f4aeee8e8">Aleksei</A></SPAN> </STRONG>mentioned the same discussion article so i checked it but it didn't work.<SPAN class=""></SPAN></P></BODY></HTML> Mon, 28 May 2018 08:13:50 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-Standby-Cluster-is-using-VIP-to-communicate-with/m-p/25970#M2037 Shehan_Wickrama 2018-05-28T08:13:50Z Re: Checkpoint Standby Cluster is using VIP to communicate with outside https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-Standby-Cluster-is-using-VIP-to-communicate-with/m-p/25971#M2038 <HTML><HEAD></HEAD><BODY><P>Does this issue have to do with your NAT configuration? Are you NAT'ing everything behind the cluster address as it is being sent out to the internet? Also here is another SK <A href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk107432&amp;partition=Advanced&amp;product=ClusterXL,">sk107432</A></P></BODY></HTML> Mon, 26 Nov 2018 12:49:09 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-Standby-Cluster-is-using-VIP-to-communicate-with/m-p/25971#M2038 Mike_A 2018-11-26T12:49:09Z