topic Re: Checkpoint 15400 in VSX cluster lost connectivity in Firewall and Security Management

Checkpoint 15400 in VSX cluster lost connectivity

Mo-Check — Fri, 13 Dec 2024 13:44:35 GMT

I've configured 2 15400s in VSX HA cluster, member 1 has an ip of 100.2.x.1 and member 2 has 100.2.x.2. Both members were working right up to this week and then we lost connectivity to 100.2.x.1 and 100.2.x.2 got priority. The only change from that week was adding the internet interface.

100.2.x.1 can't reach the gateway or even its peer 10.2.x.1. Even when I give my personal machine an ip within the same subnet reachability is still an issue. Tried fw unloadlocal as well to check whether the policies were an issue but that didn't work either.

What could be the issue here, I'm at a loss here.

Re: Checkpoint 15400 in VSX cluster lost connectivity

Chris_Atkinson — Sat, 14 Dec 2024 00:37:54 GMT

Which version & jumbo is the system installed with and what do the various cphaprob cmds report from the specific VS context?

cphaprob -a if

cphaprob stat

cphaprob -ia list

Re: Checkpoint 15400 in VSX cluster lost connectivity

the_rock — Sat, 14 Dec 2024 01:13:18 GMT

Apart the commands Chris asked for (totally valid in this case btw), can you also send a screenshot of the topology? I would want to see everything there matches...just blur out any sensitive date.

Nice weekend.

Andy