topic Re: CP 9100 UPPAK issue in Firewall and Security Management

CP 9100 UPPAK issue

VIKAS1 — Thu, 07 Aug 2025 05:17:35 GMT

Hi All,

Why my both Gateway show UPPAK and KPPK, it's should be UPPAK mode.

CP 9100 running on R81.20 JHF 99.

we are not checking this regular when i run the fwaccel stat command it's show both gateways are different mode.

Re: CP 9100 UPPAK issue

G_W_Albrecht — Thu, 07 Aug 2025 07:02:43 GMT

Did you try R81.20 Performance Tuning Administration Guide - Configuring SecureXL yet to change that ?

Re: CP 9100 UPPAK issue

RemoteUser — Thu, 07 Aug 2025 07:14:54 GMT

To change from uppak to kppak, you need to do it from cpconfig.
More importantly, if you didn't change them yourself, it would be a good idea to find out why they are different with TAC.

Re: CP 9100 UPPAK issue

VIKAS1 — Thu, 07 Aug 2025 07:47:59 GMT

I hv gone through but how come it's got changed from UPPAK to KPPAK, we are running this device over 1 years.

Re: CP 9100 UPPAK issue

VIKAS1 — Thu, 07 Aug 2025 07:48:34 GMT

that's good idea, will connect to tac, keep update

Re: CP 9100 UPPAK issue

RemoteUser — Thu, 07 Aug 2025 08:06:03 GMT

@Timothy_Hall Do you have any idea how this might be possible?

Re: CP 9100 UPPAK issue

Timothy_Hall — Thu, 07 Aug 2025 13:02:02 GMT

If the user-space SecureXL usim processes crashes enough times, the system will automatically set itself back to KPPAK. See here: sk180298: "Userspace PPAK was disabled due to repeated crashes" message on a Security Gateway

Also look in these files for clues:

/var/log/usim_x86.elg

/var/log/dump/usermode/usim_x86.<PID>.core

/var/log/dump/usermode/fwk_snd<ID>.core

/var/log/usim_crash/crash_list

Re: CP 9100 UPPAK issue

RemoteUser — Thu, 07 Aug 2025 13:04:58 GMT

I wasn't aware of this SK, thank you very much as always!!

Re: CP 9100 UPPAK issue

VIKAS1 — Fri, 08 Aug 2025 06:00:33 GMT

Thanks for update and SK. we have done the Gateway 2 to standby which was running on Active mode, i think due to that this issue accrued.

[Expert@EMB-SJRM2-FW01:0]# cphaprob stat

Cluster Mode: High Availability (Active Up) with IGMP Membership

ID Unique Address Assigned Load State Name

1 (local) 1.1.1.1 100% ACTIVE EMB-SJRM2-FW01
2 1.1.1.2 0% STANDBY EMB-SJRM2-FW02

Active PNOTEs: None

Last member state change event:
Event Code: CLUS-114704
State change: STANDBY -> ACTIVE
Reason for state change: No other ACTIVE members have been found in the cluster
Event time: Tue Aug 5 19:55:04 2025

Last cluster failover event:
Transition to new ACTIVE: Member 2 -> Member 1
Reason: ADMIN_DOWN PNOTE
Event time: Tue Aug 5 19:55:04 2025

Cluster failover count:
Failover counter: 14
Time of counter reset: Sat Aug 24 11:56:54 2024 (reboot)

[Expert@EMB-SJRM2-FW01:0]#