https://community.checkpoint.com/t5/Firewall-and-Security-Management/Change-cluster-interface-to-private-and-required-interfaces/m-p/255381#M49968 <P>I changed a cluster interface from cluster to private (non-monitored) after years of being used as a cluster, The number of required interfaces from the output of 'cphaprob -a if' didn't get reduced.&nbsp; All the interfaces show the correct status as UP or non-monitored but the required interfaces in the 'cphaprob -a if' command still has the old count so the cluster is Primary ACTIVE attention and secondary is DOWN.&nbsp; The interfaces were already in DOWN state before the Smartdashboard change to change it to private and policy install was done.<BR /><BR />According to checkpoint docs, if the number doesn't decrease, you should reboot the firewalls (standby first).&nbsp; It appears the firewalls keep a running total of expected number of interfaces since it was rebooted and doesn't seem to recheck the count with policy.<BR /><BR />My question is can you just do a clusterXL_admin down and up to reset that count or does it really require a reboot of the gateways?&nbsp; I suspect it requires a reboot but was hoping someone knows.</P> Mon, 18 Aug 2025 21:53:17 GMT Adam276 2025-08-18T21:53:17Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Change-cluster-interface-to-private-and-required-interfaces/m-p/255381#M49968 <P>I changed a cluster interface from cluster to private (non-monitored) after years of being used as a cluster, The number of required interfaces from the output of 'cphaprob -a if' didn't get reduced.&nbsp; All the interfaces show the correct status as UP or non-monitored but the required interfaces in the 'cphaprob -a if' command still has the old count so the cluster is Primary ACTIVE attention and secondary is DOWN.&nbsp; The interfaces were already in DOWN state before the Smartdashboard change to change it to private and policy install was done.<BR /><BR />According to checkpoint docs, if the number doesn't decrease, you should reboot the firewalls (standby first).&nbsp; It appears the firewalls keep a running total of expected number of interfaces since it was rebooted and doesn't seem to recheck the count with policy.<BR /><BR />My question is can you just do a clusterXL_admin down and up to reset that count or does it really require a reboot of the gateways?&nbsp; I suspect it requires a reboot but was hoping someone knows.</P> Mon, 18 Aug 2025 21:53:17 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Change-cluster-interface-to-private-and-required-interfaces/m-p/255381#M49968 Adam276 2025-08-18T21:53:17Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Change-cluster-interface-to-private-and-required-interfaces/m-p/255384#M49969 <P>I dont believe reboot is needed. I always used to do cphastop; cphastart in that case and was fine after.</P> <P>Andy</P> Mon, 18 Aug 2025 23:58:55 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Change-cluster-interface-to-private-and-required-interfaces/m-p/255384#M49969 the_rock 2025-08-18T23:58:55Z