topic Re: ClusterXL in General Topics

ClusterXL

Sanjay_S — Wed, 22 Nov 2017 06:18:16 GMT

Hi Guys, Need a help with the ClusterXL issue. We have High Availability between 2 firewalls(ClusterXL). In the active firewall the output of 'cphaprob stat' shows Active/Down, however in the standby firewall shows Active/Standby. In the tracker when i checked the information contains CCP we got these packets with the info (cluster_info: (ClusterXL) CCP was not heard from member 2 on ifn ethx.xxx. Please check network configuration.) Could you please help us in fixing this issue.

Re: ClusterXL

Marco_Valenti — Wed, 22 Nov 2017 08:13:37 GMT

On the active meber

output of cphaprob -a if

output of cphaprob -ia list

did you try to cpstop ; cpstart problematic memeber yet?

Re: ClusterXL

Sumanth_Parvath — Wed, 21 Feb 2018 16:54:47 GMT

Hi Sanjay, How did you guys resolve this issue??? We've two 23800's configured in Cluster running on R80.10 Take-42 since December-2017. Recently we discovered the same issue as yours, In the active firewall the output of 'cphaprob stat' shows Active/Down, however in the standby firewall shows Active/Standby.We tried cpstop & cptstart and rebooted problematic one, but that doesn't resolved our issue.

Re: ClusterXL

Vanesa_Benito_O — Wed, 17 Jun 2020 10:07:54 GMT

Hi Sanjay, How did you guys resolve this issue??? I've two appliance configured in Cluster running on R80.30 Take-200. Recently we discovered the same issue as yours, I tried cpstop & cptstart and rebooted problematic one, but that doesn't resolved our issue.
Can you tell me the SK where it is said how to solve the problem?

Re: ClusterXL

Chinmaya_Naik — Wed, 17 Jun 2020 10:18:35 GMT

It's interesting

Which version are you running ?

Are you able to do failover successfully?

update the below output.

cphaprob stat

cphaprob -a if

cphaprob -ia if

fwaccel stat

fw ctl affinity -l -r

Re: ClusterXL

_Val_ — Wed, 17 Jun 2020 10:28:29 GMT

Wither cluster ID or CoreXL are not the same on both members.

Re: ClusterXL

HeikoAnkenbrand — Wed, 17 Jun 2020 16:48:45 GMT

Hi @Sanjay_S ,

Check this on both members:

- is the OS version the same (fw ver)
- check 32/64 bit (uname -all)
- check the cluster id (tcpdump -vv -nn -e -i <ethX> port 8116)
- check ccp (broadcast, multicast, unicast). (cphaprob-a if)
- check interface issues (cphaprob -a if)
- check CoreXL (cpconfig > CoreXL)
- check long cluster error message (cpstat ha -f all)

More infos to cluster id and ccp can you found here:
R80.x - cheat sheet - ClusterXL