topic Re: HA is swing without any changes (Quantum Spark 1800) (R81.10.05) in Firewall and Security Management

HA is swing without any changes (Quantum Spark 1800) (R81.10.05)

CheckCheckM — Mon, 27 Mar 2023 05:39:25 GMT

Dear all,

im facing a issue HA cluster is failover secondary device without any changes but i see "cphaprob state" ate primary device as below. It is saying "Incorrect configuration - Local cluster member has fewer cluster interfaces configured compared to other cluster member(s)".

Actually, no interfaces were down. all are up state. but checkpoint is knowing these interfaces are down state. So, ha is failover to secondary.

Anyone experienced it?

Thanks much.

Re: HA is swing without any changes (Quantum Spark 1800) (R81.10.05)

G_W_Albrecht — Mon, 27 Mar 2023 07:04:38 GMT

Did it ever work ?

Re: HA is swing without any changes (Quantum Spark 1800) (R81.10.05)

CheckCheckM — Mon, 27 Mar 2023 08:04:38 GMT

sure, it works previously.

Re: HA is swing without any changes (Quantum Spark 1800) (R81.10.05)

Chris_Atkinson — Mon, 27 Mar 2023 15:00:06 GMT

Do you have "cphaprob -a if" output from the time of the issue or equivalent logs/messages?

Re: HA is swing without any changes (Quantum Spark 1800) (R81.10.05)

CheckCheckM — Tue, 28 Mar 2023 03:44:57 GMT

here is it. it says interface are down. I have HA cluster for two devices, i assign x.x.x.1 for primary device and x.x.x.2 for seondary device and x.x.x.3 for cluster ip. i can ping to x.x.x.1 for all interfaces exception from mgmt address.

Re: HA is swing without any changes (Quantum Spark 1800) (R81.10.05)

Chris_Atkinson — Tue, 28 Mar 2023 05:48:55 GMT

On the interfaces reporting as down, what do you see if monitoring with tcpdump or similar?

On those specific VLANs is there much traffic and many hosts to begin with?

Re: HA is swing without any changes (Quantum Spark 1800) (R81.10.05)

CheckCheckM — Fri, 31 Mar 2023 04:38:06 GMT

actually, my topology is like this. all respective vlan have at switch, all is up like fw02. But fw01 is knowing interface down state. i have no idea, what's wrong with it. How should i check it, pls kindly suggest it. thanks.

Re: HA is swing without any changes (Quantum Spark 1800) (R81.10.05)

Chris_Atkinson — Fri, 31 Mar 2023 04:52:03 GMT

As above what do you see when monitoring with tcpdump on that gw/interface?

How about the switchport config, all the necessary VLANs allowed on the trunk port?

Re: HA is swing without any changes (Quantum Spark 1800) (R81.10.05)

CheckCheckM — Tue, 04 Apr 2023 04:26:21 GMT

when i did tcpdump at gw/interface, please check the attached screenshot.

I have done configured all necessary vlan at trunk port of switch also. Thanks.

Re: HA is swing without any changes (Quantum Spark 1800) (R81.10.05)

Chris_Atkinson — Tue, 04 Apr 2023 05:50:21 GMT

If you change / remove the host filter do you see anything other than unanswered ARP requests?

Re: HA is swing without any changes (Quantum Spark 1800) (R81.10.05)

CheckCheckM — Tue, 04 Apr 2023 08:42:20 GMT

i cannot see any unanswered arp requests as attaches. thanks.

Re: HA is swing without any changes (Quantum Spark 1800) (R81.10.05)

Chris_Atkinson — Tue, 04 Apr 2023 09:30:41 GMT

To clarify if you perform "arp -a | grep 10.20.30." what do you see?