topic ClusterXL - 6200P - Cluster issue in Firewall and Security Management

ClusterXL - 6200P - Cluster issue

ftangen — Fri, 22 Sep 2023 14:48:41 GMT

Hi all,

We have two Check Point 6200P in two different parts of a building - running ClusterXL.

I feel like i am super close getting this to work - however experiencing one issue when running "cphaprob stat":

FW02> cphaprob stat

Cluster Mode: High Availability (Active Up) with IGMP Membership

ID Unique Address Assigned Load State Name

1 192.168.10.1 100% ACTIVE FW01
2 (local) 192.168.10.2 0% DOWN FW02

Active PNOTEs: LPRB, IAC

Last member state change event:
Event Code: CLUS-110800
State change: ACTIVE -> DOWN
Reason for state change: Incorrect configuration - Local cluster member has fewer cluster interfaces configured compared to other cluster member(s)
Event time: Fri Sep 22 14:55:29 2023.

------

Have checked that the interfaces in Network Manager are the same, and the same amount on both FW`s.

Can anyone please point me in the right direction?
Let me know if you need more information 🙂

Thanks!

Re: ClusterXL - 6200P - Cluster issue

ftangen — Sat, 23 Sep 2023 07:13:09 GMT

Here is some more information.
What i find strange is that under Required Interfaces there is a difference:

Re: ClusterXL - 6200P - Cluster issue

_Val_ — Mon, 25 Sep 2023 06:32:00 GMT

Start with the cables connected to eth2 and eth3.

Re: ClusterXL - 6200P - Cluster issue

ftangen — Mon, 25 Sep 2023 07:02:13 GMT

Hi,

Thanks for the response!
I ran show interface eth1-03 and 02 and it only showed traffic one way - and accoring to what i have found out that will make the cluster down.

We have got the eth2 sorted out now - and hopefully we get thte eth1-03 fixed by end of today.

Will update here with the solution as soon as possible - if it worked.