topic Can not ping cluster IP address (Load-sharing unicast mode) in Firewall and Security Management

Can not ping cluster IP address (Load-sharing unicast mode)

minhhaivietnam — Thu, 02 Dec 2021 04:27:18 GMT

Hello all,

I build a cluster R80.10 , running active/active load-sharing unicast mode.

From other devices(such router), I can ping all address: fw1(.178), fw2(179), cluster ip(177).

But when I am on FW1 or FW2, I can not ping cluster IP (still ping ip of each other)

Please anyone help to know why?

Thank you!

Re: Can not ping cluster IP address (Load-sharing unicast mode)

PhoneBoy — Mon, 20 Apr 2020 01:00:07 GMT

Reaching the cluster IPs from the gateways themselves doesn't seem all that relevant, especially if it's working from other connected machines.
Why is this relevant?

Re: Can not ping cluster IP address (Load-sharing unicast mode)

minhhaivietnam — Mon, 20 Apr 2020 01:44:52 GMT

Hello PhoneBoy,

Thank u.

So GW can not reach IP cluster is expected behavior or not? I read some article on internet about stanby GW can not ping cluster IP but not my situation. (mine is active/active load-sharing unicast).

My network is now operating normally so I am not so worried. Just want to know this is normal or something not right.

Re: Can not ping cluster IP address (Load-sharing unicast mode)

PhoneBoy — Mon, 20 Apr 2020 03:27:04 GMT

This SK refers to HA, but it also applies to Load Sharing.
It's not supported.
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102327