topic Re: Odd cphaprob output in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/Odd-cphaprob-output/m-p/75319#M5819 Connected via a switch by the bye, but not germane to the issue in this case as the interfaces were not down, except for CP HA. Fri, 14 Feb 2020 17:40:02 GMT Stephen_Moreau 2020-02-14T17:40:02Z Odd cphaprob output https://community.checkpoint.com/t5/Firewall-and-Security-Management/Odd-cphaprob-output/m-p/73976#M5688 <P>Having an unusual issue with a cluster firewall interface. Firewall was rebooted and post reboot one side of the sync interface is showing an issue where the inbound is up but the outbound is down. The other side is UP &amp; UP.</P><P>fw1-cxl1:0]# cphaprob -a if</P><P>Required interfaces: 7<BR />Required secured interfaces: 1</P><P>eth7 Inbound: UP Outbound: DOWN (6062.3 secs) sync(secured), multicast<BR />eth5 UP non sync(non secured), multicast (eth5.71 )<BR />bond2 UP non sync(non secured), multicast, bond Load Sharing (bond2.32 )<BR />bond0 UP non sync(non secured), multicast, bond Load Sharing (bond0.17 )<BR />bond1 UP non sync(non secured), multicast, bond Load Sharing (bond1.80 )<BR />bond0 UP non sync(non secured), multicast, bond Load Sharing (bond0.245 )<BR />eth5 UP non sync(non secured), multicast (eth5.246 )</P><P>Any obvious (to you!) ideas what might cause this before I roll up my sleeves?</P><P>TIA</P> Sun, 02 Feb 2020 12:49:41 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Odd-cphaprob-output/m-p/73976#M5688 Stephen_Moreau 2020-02-02T12:49:41Z Re: Odd cphaprob output https://community.checkpoint.com/t5/Firewall-and-Security-Management/Odd-cphaprob-output/m-p/74558#M5737 <P>What is the physical setup of the sync interface?&nbsp; Just an Ethernet cable or connected through a switch?</P> <P>&nbsp;</P> Sun, 09 Feb 2020 16:04:22 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Odd-cphaprob-output/m-p/74558#M5737 Timothy_Hall 2020-02-09T16:04:22Z Re: Odd cphaprob output https://community.checkpoint.com/t5/Firewall-and-Security-Management/Odd-cphaprob-output/m-p/74563#M5739 <P>igmp snooping on switch side could be a cause too.<BR />you can verify that by setting the cluster to unicast or broadcast for testing purpose.<BR />See sk20576.</P> Sun, 09 Feb 2020 17:35:18 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Odd-cphaprob-output/m-p/74563#M5739 Daniel_Schlifka 2020-02-09T17:35:18Z Re: Odd cphaprob output https://community.checkpoint.com/t5/Firewall-and-Security-Management/Odd-cphaprob-output/m-p/75318#M5818 <P>Just to close the circle on this. My issue turned out to be a problem with mis-matching count of CoreXL instances on both nodes. Visible under cpview 'SysInfo'. Once I matched the number of instances by changing the config in cpconfig and rebooting, the previous stable status was restored.</P><P>Why it stopped using the sync interface IP addresses while the mismatch occurred is unknown.</P> Fri, 14 Feb 2020 17:36:36 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Odd-cphaprob-output/m-p/75318#M5818 Stephen_Moreau 2020-02-14T17:36:36Z Re: Odd cphaprob output https://community.checkpoint.com/t5/Firewall-and-Security-Management/Odd-cphaprob-output/m-p/75319#M5819 Connected via a switch by the bye, but not germane to the issue in this case as the interfaces were not down, except for CP HA. Fri, 14 Feb 2020 17:40:02 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Odd-cphaprob-output/m-p/75319#M5819 Stephen_Moreau 2020-02-14T17:40:02Z