topic Re: Not able to access webpage of secondary server in a cluster when using vpn in General Topics

Not able to access webpage of secondary server in a cluster when using vpn

Karan0587 — Wed, 25 Jan 2023 02:19:05 GMT

Hi Experts,

Need your help in the below issue

I have deployed checkpoint FW in the cluster (HA) successfully but when I am trying to access the webpage of the secondary server when connected to VPN it doesn't work.

The webpage opens when I am inside the network, i then checked another customer with HA setup and tried doing vpn and same issue can't access webpage of secondary server.

Any inputs would be beneficial here.

6200 Appliance

81.20 connected through Smart 1

Re: Not able to access webpage of secondary server in a cluster when using vpn

the_rock — Wed, 25 Jan 2023 02:31:48 GMT

Hey mate,

We need more details about this. For example, are you able to ssh to 2nd member? Can you ping it, what does traceroute show via vpn? Also, when you try access it, and it fails, what do logs show in smart console? Alternatively, you can do zdebug on primary member when doing this...so say your vpn IP is 172.16.10.50, you can do this from expert mode of primary fw:

fw ctl zdebug + drop | grep 172.16.10.50

Re: Not able to access webpage of secondary server in a cluster when using vpn

Blason_R — Wed, 25 Jan 2023 03:15:20 GMT

What is the port number platform portal set? 443 or any custom? Try capturing the packets on other firewall; I guess this is due to VMAC as VMAC is attached to primary connection sent to cluster member is being responded by VMAC Address.