topic Re: Unable to ping Sync IP between gateways in Firewall and Security Management

Unable to ping Sync IP between gateways

shiwawa — Mon, 11 Apr 2022 08:11:13 GMT

Hi Experts,

We just setup a new gateway's 6600 in ClusterXL mode. Everything seems to fine except I noticed that I could not ping the Sync IP's between gateways. We are running R81 version for both. The Sync interfaces seems to be okay when I ran commands to check their status. I can ping and ssh to the Management, & Switches just fine.

cphaprob state

cphaprob -am if

ethTool Sync

Sync IP's are in /29 subnet and shows just fine in Smart Console (Get Topology w/ interfaces).

Is there anything that I could have missed or this is normal for new setup. Appreciate for all the advices.

Re: Unable to ping Sync IP between gateways

Chris_Atkinson — Mon, 11 Apr 2022 23:49:49 GMT

Can you see ARP entries for the other Gateway via this interface?

Do you have logging of implied rules enabled and do you see any anti-spoofing drops?

Re: Unable to ping Sync IP between gateways

the_rock — Mon, 11 Apr 2022 23:58:26 GMT

I could be mistaken, but I believe that is indeed an expected behavior.

Re: Unable to ping Sync IP between gateways

diburaj — Fri, 27 May 2022 21:20:36 GMT

Are you able to see traffic incrementing in the interface counter use the command

cpstat os -f ifconfig

do you have the sync interface directly connected or through the switch.