ClusterXL Formation

fatalXerror — Mon, 10 Dec 2018 16:08:09 GMT

Hi Guys,

I would like to seek for your expertise to check if my cluster have formed. I am a bit confused and no idea why in my Smart-1, cluster is showing an error but based on CLI, I can say that my 2x CP gateways is acting master and non-master meaning cluster is formed right? But some information is showing that it is down or lost of sync is incrementing etc.

I just cable my 2x gateways back to back using the Sync interface.

=================

FW01> cphaprob role

Number Role

1 (local) Master
2 Non-Master

FW02> cphaprob role

Number Role

1 Master
2 (local) Non-Master

FW02> cphaprob state

Cluster Mode: High Availability (Active Up) with IGMP Membership

Number Unique Address Assigned Load State

1 192.168.1.2 100% Active Attention
2 (local) 192.168.1.3 0% Down

=================

====================================

FW01> cphaprob syncstat

Sync Statistics (IDs of F&A Peers - 1 😞

Other Member Updates:
Sent retransmission requests................... 0
Avg missing updates per request................ 0
Old or too-new arriving updates................ 0
Unsynced missing updates....................... 0
Lost sync connection (num of events)........... 24
Timed out sync connection ..................... 0

Local Updates:
Total generated updates ....................... 151642
Recv Retransmission requests................... 0
Recv Duplicate Retrans request................. 0

Blocking Events................................ 0
Blocked packets................................ 0
Max length of sending queue.................... 0
Avg length of sending queue.................... 0
Hold Pkts events............................... 6
Unhold Pkt events.............................. 6
Not held due to no members..................... 0
Max held duration (sync ticks)................. 0
Avg held duration (sync ticks)................. 0

Timers:
Sync tick (ms)................................. 100
CPHA tick (ms)................................. 100

Queues:
Sending queue size............................. 512
Receiving queue size........................... 256

FW02> cphaprob syncstat

Sync Statistics (IDs of F&A Peers - 1 😞

Other Member Updates:
Sent retransmission requests................... 0
Avg missing updates per request................ 0
Old or too-new arriving updates................ 0
Unsynced missing updates....................... 0
Lost sync connection (num of events)........... 25
Timed out sync connection ..................... 5

Local Updates:
Total generated updates ....................... 150084
Recv Retransmission requests................... 0
Recv Duplicate Retrans request................. 0

Blocking Events................................ 0
Blocked packets................................ 0
Max length of sending queue.................... 0
Avg length of sending queue.................... 0
Hold Pkts events............................... 227
Unhold Pkt events.............................. 227
Not held due to no members..................... 16
Max held duration (sync ticks)................. 0
Avg held duration (sync ticks)................. 0

Timers:
Sync tick (ms)................................. 100
CPHA tick (ms)................................. 100

Queues:
Sending queue size............................. 512
Receiving queue size........................... 256

====================================

What is the useful information that I can use to determine if the ClusterXL is formed with no issues?

Thanks

Re: ClusterXL Formation

Mike_A — Mon, 10 Dec 2018 17:17:39 GMT

Try Debugging Full Synchronization in ClusterXL

cphaprob list may be what you're looking for.

Re: ClusterXL Formation

Timothy_Hall — Mon, 10 Dec 2018 18:57:18 GMT

Please provide output of commands cphaprob -a if and cphaprob -l list for both cluster members. You have a pnote failure in the cluster (probably a network interface mismatch or disconnect of some kind).

--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com

topic Re: ClusterXL Formation in General Topics

ClusterXL Formation

Re: ClusterXL Formation

Re: ClusterXL Formation