topic Re: In ClusterXL, unused interfaces are marked as Monitored Interfaces. in Firewall and Security Management

In ClusterXL, unused interfaces are marked as Monitored Interfaces.

ChoiYunSoo — Mon, 04 Sep 2023 06:08:55 GMT

Today I worked on adding a VLAN interface to a customer's firewall.

But due to other issues I had to restore the interface

But something strange happened

I deleted the interface in the CLI configuration, deleted the VLAN interface using 'Get' in the smart console topology, and installed the policy, but the ClusterXL Monitored interface still displays a VLAN interface.

In detail, it is as follows:

When you enter the 'cphaprob -a if' command in CLI, the VLAN interface is not displayed.

And when I typed 'cphaprob -l list' / 'cphaprob -e' as CLI commands, pnote shows all statuses as ok.

However, if you look at 'Device & License Information --> ClusterXL --> Interface table' in SmartConsole, you can see the 'eth1-01.131' VLAN interface and the interface is marked as Down.

Of course, if you look at the 'Problem Notification Table' on the same screen of SmartConsole, all statuses are displayed as ok here as well.

The customer's management server and firewall are both version R81.10, and the interface uses the 10Gbps i40e driver.
Has anyone experienced similar bug symptoms as me?

The standby firewall solved the problem by restarting the daemon, but due to failover issues, FW_A is unable to restart the daemon and still displays the VLAN interface.

Thank you in advance for those who responded

Re: In ClusterXL, unused interfaces are marked as Monitored Interfaces.

G_W_Albrecht — Mon, 04 Sep 2023 07:21:32 GMT

Looks like a cosmetic issue in SmartConsole as CLI does not display it. Did you try a reboot already ?

Re: In ClusterXL, unused interfaces are marked as Monitored Interfaces.

ChoiYunSoo — Tue, 05 Sep 2023 07:31:32 GMT

Thank you for your reply

It's not a cosmetic problem

In fact, ClusterXL redundancy indicates Down status.

I uploaded a capture file to help you understand.

Re: In ClusterXL, unused interfaces are marked as Monitored Interfaces.

G_W_Albrecht — Tue, 05 Sep 2023 07:35:38 GMT

I would suggest to call TAC immediately to get this resolved asap !

Re: In ClusterXL, unused interfaces are marked as Monitored Interfaces.

emmap — Tue, 05 Sep 2023 07:38:57 GMT

Interface monitoring oddness can sometimes require a reboot to clear up. I'd suggest setting the interface to 'state off' before rebooting to be sure.

Re: In ClusterXL, unused interfaces are marked as Monitored Interfaces.

ChoiYunSoo — Tue, 05 Sep 2023 07:46:12 GMT

Currently the FW_B firewall is cpstop; Confirmed normalization with cpstart

However, there are servers that require a restart when fail-over, so I posted a post on the community to see if there was a way to not fail-over.

Thank you for answer

Re: In ClusterXL, unused interfaces are marked as Monitored Interfaces.

ChoiYunSoo — Tue, 05 Sep 2023 07:47:48 GMT

I opened the case and the manufacturer is investigating the case.

Thanks for your reply