topic Re: How to temporary stop VS in both VSX cluster Node 1 and Node 2 in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-temporary-stop-VS-in-both-VSX-cluster-Node-1-and-Node-2/m-p/235748#M45716 <P>Are you trying to run the clustering commands after the cpstop was performed?</P> <P>Do you have access to control / isolate this on the network/switch/VLAN side as an alternative?</P> Sat, 14 Dec 2024 04:18:28 GMT Chris_Atkinson 2024-12-14T04:18:28Z How to temporary stop VS in both VSX cluster Node 1 and Node 2 https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-temporary-stop-VS-in-both-VSX-cluster-Node-1-and-Node-2/m-p/235640#M45687 <P>Hi,</P><P>I have 3 Virtual System in VSX Cluster (Node 1 and Node 2)</P><P>&nbsp;</P><P>Virtual Devices Status on each Cluster Member<BR />=============================================</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="vsx-cluster.png" style="width: 338px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/28795iB1A1CF43D05F2264/image-dimensions/338x174?v=v2" width="338" height="174" role="button" title="vsx-cluster.png" alt="vsx-cluster.png" /></span></P><P>I want to temporarily shut VS 3 and not delete it.</P><P>It should be persistent and should not get enabled, when the gateways reboot</P><P>===================</P><P>I tried to use "clusterXL_admin down -p" on one of the VSX and it worked fine. But when I tried on other, it gives error "Like HA not started"</P><P>Infact it will not allow to shut VS on both node, Is there a way to achieve this without impacting the pther VS in the cluster.</P><P>&nbsp;</P><P>As of now on 1 VSX I have used "clusterXL_admin down -p" and on the other cpstop.</P><P>Thanks</P><P>Deepak</P><P>&nbsp;</P> Fri, 13 Dec 2024 10:59:33 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-temporary-stop-VS-in-both-VSX-cluster-Node-1-and-Node-2/m-p/235640#M45687 maildpak 2024-12-13T10:59:33Z Re: How to temporary stop VS in both VSX cluster Node 1 and Node 2 https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-temporary-stop-VS-in-both-VSX-cluster-Node-1-and-Node-2/m-p/235748#M45716 <P>Are you trying to run the clustering commands after the cpstop was performed?</P> <P>Do you have access to control / isolate this on the network/switch/VLAN side as an alternative?</P> Sat, 14 Dec 2024 04:18:28 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-temporary-stop-VS-in-both-VSX-cluster-Node-1-and-Node-2/m-p/235748#M45716 Chris_Atkinson 2024-12-14T04:18:28Z Re: How to temporary stop VS in both VSX cluster Node 1 and Node 2 https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-temporary-stop-VS-in-both-VSX-cluster-Node-1-and-Node-2/m-p/235790#M45720 <P>1. Install any-any-any-drop rule as #1&nbsp;on VS3</P> <P>2. Shutdown all interfaces on VS3</P> <P>3. cronjob @reboot "vsenv 3;cpstop"</P> Sun, 15 Dec 2024 21:49:20 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-temporary-stop-VS-in-both-VSX-cluster-Node-1-and-Node-2/m-p/235790#M45720 JozkoMrkvicka 2024-12-15T21:49:20Z