topic Re: Flapping of synchronization interfaces in cluster load sharing unicast in Firewall and Security Management

Flapping of synchronization interfaces in cluster load sharing unicast

Agust — Thu, 17 Nov 2022 20:13:48 GMT

Hi guys.

How are you?

I have a question, I would appreciate if you could help me.We detected a flapping in a switch that is used to connect the synchronism interfaces.
These interfaces share the same vlan, which is dedicated to forward this sync traffic between the cluster members.
The cluster is in load sharing mode and has a unicast configuration.
The virtual cluster interfaces all have the same VMAC address.
The switch is a Cisco Catalyst, as I had found a SK that reported a known bug for the Cisco Nexus series.
The cluster version is R81.10, so it already has kernel 3.10.

Thank you very much.

Regards.

Re: Flapping of synchronization interfaces in cluster load sharing unicast

Chris_Atkinson — Thu, 17 Nov 2022 23:43:06 GMT

Some questions for context:

Do you see a mac-flap or an interface up/down, how is portfast configured?

What model of appliance & type of interface is used for Sync?

Can you also confirm the JHF level the system is installed with?

Re: Flapping of synchronization interfaces in cluster load sharing unicast

the_rock — Fri, 18 Nov 2022 00:27:15 GMT

Is VMAC option checked on cluster object under clusterxl tab?

Re: Flapping of synchronization interfaces in cluster load sharing unicast

_Val_ — Fri, 18 Nov 2022 08:09:52 GMT

Which SK are you referring to?

Re: Flapping of synchronization interfaces in cluster load sharing unicast

Agust — Fri, 18 Nov 2022 17:40:24 GMT

Hi Chris!
We could only see the flapping in the logs, although we do not rule out that there may be some drop and because the buffer was full we could not notice it.
The model is a Cisco Catalyst 2960X with the IOS 15.2 operating system.
Currently they have installed the JHF take 45, with two portfix that TAC provided us, due to other problems that the cluster has had.
Thank you.
Regards.

Re: Flapping of synchronization interfaces in cluster load sharing unicast

Agust — Fri, 18 Nov 2022 17:41:47 GMT

Hi!!
Yes, the VMAC option is enabled in the cluster object.

Re: Flapping of synchronization interfaces in cluster load sharing unicast

Agust — Fri, 18 Nov 2022 17:43:46 GMT

Hi Val!

The SK I refer to is next, but it is about the Cisco Nexus.

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk105697

Regards!

Re: Flapping of synchronization interfaces in cluster load sharing unicast

the_rock — Fri, 18 Nov 2022 18:06:06 GMT

I read that article and I see workaround CP has, but not sure if thats something most clients would do, to switch from unicast to broadcast. Even in HA active-standby, CCP mode by default is ALWAYS unicast and works fine. I worked with customer before who also had Cisco Nexus (not sure exact model number), but they never had this issue, though they had cluster XL HA, not load-sharing.

Here are some questions I have:

1) Were you guys always using same switch?

2) If answer to 1 is yes, when did this issue happen originally?

3) If answer to 1 is no, what was behavior previously?

4) How often does the problem happen?

Andy

Re: Flapping of synchronization interfaces in cluster load sharing unicast

Agust — Fri, 18 Nov 2022 19:06:23 GMT

Hi Andy!

Thank you for your comments.
We had our doubts also with that SK.
Yes, the switch that was used was always the same, although we do not know since when this error started, this flapping happens constantly.

Regards

Re: Flapping of synchronization interfaces in cluster load sharing unicast

the_rock — Fri, 18 Nov 2022 19:11:30 GMT

Ok, fair enough. In that case, me personally, I would either change whats suggested in the sk (though probably not the best idea) OR call Cisco and see what they can offer you as a solution/workaround. There really does not seem to be any other logical option, at least : - )