<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic ClusterXL not failing over when interface down in General Topics</title>
    <link>https://community.checkpoint.com/t5/General-Topics/ClusterXL-not-failing-over-when-interface-down/m-p/186335#M31099</link>
    <description>&lt;P&gt;I have a pair of 3600 appliances running R80.40 T197. For the most part HA is working fine. If one member goes down, the other takes over. However, if i take down the external facing (and SMS management) interface, the active member becomes active-attention and the standby doesnt take over. I have a separate sync-dedicated interface on each member, so its not like they lose sight of each other. The SMS will lose sight since its the external/mgmt int that goes down.&lt;/P&gt;&lt;P&gt;Any ideas what i should check?&lt;/P&gt;</description>
    <pubDate>Thu, 13 Jul 2023 10:00:02 GMT</pubDate>
    <dc:creator>jimm</dc:creator>
    <dc:date>2023-07-13T10:00:02Z</dc:date>
    <item>
      <title>ClusterXL not failing over when interface down</title>
      <link>https://community.checkpoint.com/t5/General-Topics/ClusterXL-not-failing-over-when-interface-down/m-p/186335#M31099</link>
      <description>&lt;P&gt;I have a pair of 3600 appliances running R80.40 T197. For the most part HA is working fine. If one member goes down, the other takes over. However, if i take down the external facing (and SMS management) interface, the active member becomes active-attention and the standby doesnt take over. I have a separate sync-dedicated interface on each member, so its not like they lose sight of each other. The SMS will lose sight since its the external/mgmt int that goes down.&lt;/P&gt;&lt;P&gt;Any ideas what i should check?&lt;/P&gt;</description>
      <pubDate>Thu, 13 Jul 2023 10:00:02 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/ClusterXL-not-failing-over-when-interface-down/m-p/186335#M31099</guid>
      <dc:creator>jimm</dc:creator>
      <dc:date>2023-07-13T10:00:02Z</dc:date>
    </item>
    <item>
      <title>Re: ClusterXL not failing over when interface down</title>
      <link>https://community.checkpoint.com/t5/General-Topics/ClusterXL-not-failing-over-when-interface-down/m-p/186338#M31100</link>
      <description>&lt;P&gt;What pnotes do you see in cphaprob outputs?&lt;/P&gt;
&lt;P&gt;cphaprob stat&lt;/P&gt;
&lt;P&gt;cphaprob -a if&lt;/P&gt;
&lt;P&gt;cphaprob -ia list&lt;/P&gt;</description>
      <pubDate>Thu, 13 Jul 2023 10:31:01 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/ClusterXL-not-failing-over-when-interface-down/m-p/186338#M31100</guid>
      <dc:creator>Chris_Atkinson</dc:creator>
      <dc:date>2023-07-13T10:31:01Z</dc:date>
    </item>
    <item>
      <title>Re: ClusterXL not failing over when interface down</title>
      <link>https://community.checkpoint.com/t5/General-Topics/ClusterXL-not-failing-over-when-interface-down/m-p/186339#M31101</link>
      <description>&lt;P&gt;Please send commands&amp;nbsp;&lt;a href="https://community.checkpoint.com/t5/user/viewprofilepage/user-id/3630"&gt;@Chris_Atkinson&lt;/a&gt;&amp;nbsp;asked, plus output of cphaprob syncstat as well.&lt;/P&gt;
&lt;P&gt;Cheers,&lt;/P&gt;
&lt;P&gt;Andy&lt;/P&gt;</description>
      <pubDate>Thu, 13 Jul 2023 10:54:58 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/ClusterXL-not-failing-over-when-interface-down/m-p/186339#M31101</guid>
      <dc:creator>the_rock</dc:creator>
      <dc:date>2023-07-13T10:54:58Z</dc:date>
    </item>
    <item>
      <title>Re: ClusterXL not failing over when interface down</title>
      <link>https://community.checkpoint.com/t5/General-Topics/ClusterXL-not-failing-over-when-interface-down/m-p/186783#M31206</link>
      <description>&lt;P&gt;Re the cphaprob commands, below is what i was seeing on the active member when its external interface (eth1) is downed. eth5 was dedicated for sync. eth1 was secondary sink as well as external interface. I have since resolved the issue by removing the sync role from eth1 and only having it on eth5 (dedicated sync).&lt;/P&gt;&lt;P&gt;Cluster Mode: High Availability (Active Up) with IGMP Membership&lt;/P&gt;&lt;P&gt;ID Unique Address Assigned Load State Name&lt;/P&gt;&lt;P&gt;1 169.254.1.1 0% STANDBY CPFW01&lt;BR /&gt;2 (local) 169.254.1.2 100% ACTIVE(!) CPFW02&lt;/P&gt;&lt;P&gt;&lt;BR /&gt;Active PNOTEs: IAC&lt;/P&gt;&lt;P&gt;Last member state change event:&lt;BR /&gt;Event Code: CLUS-110205&lt;BR /&gt;State change: ACTIVE -&amp;gt; ACTIVE(!)&lt;BR /&gt;Reason for state change: Interface eth5 is down (disconnected / link down)&lt;BR /&gt;Event time: Wed Jul 19 09:00:14 2023&lt;/P&gt;&lt;P&gt;CCP mode: Manual (Unicast)&lt;BR /&gt;Required interfaces: 4&lt;BR /&gt;Required secured interfaces: 2&lt;/P&gt;&lt;P&gt;&lt;BR /&gt;Interface Name: Status:&lt;/P&gt;&lt;P&gt;eth5 (S) UP&lt;BR /&gt;Mgmt Non-Monitored&lt;BR /&gt;eth1 (S) Inbound: DOWN (8.6 secs)&lt;BR /&gt;Outbound: DOWN (8.8 secs)&lt;BR /&gt;eth2.105 UP&lt;BR /&gt;eth2.979 UP&lt;/P&gt;&lt;P&gt;eth1 10.3.2.13&lt;BR /&gt;eth2.970 192.168.238.65&lt;BR /&gt;eth2.975 192.168.238.129&lt;BR /&gt;eth2.105 192.168.238.209&lt;BR /&gt;eth2.973 192.168.238.97&lt;BR /&gt;eth2.979 10.138.254.1&lt;BR /&gt;eth2.971 192.168.238.1&lt;BR /&gt;eth2.974 192.168.238.113&lt;/P&gt;&lt;P&gt;&lt;BR /&gt;Built-in Devices:&lt;/P&gt;&lt;P&gt;Device Name: Interface Active Check&lt;BR /&gt;Current state: problem (non-blocking)&lt;/P&gt;&lt;P&gt;&lt;BR /&gt;Delta Sync Statistics&lt;/P&gt;&lt;P&gt;Sync status: OK&lt;/P&gt;&lt;P&gt;Drops:&lt;BR /&gt;Lost updates................................. 0&lt;BR /&gt;Lost bulk update events...................... 0&lt;BR /&gt;Oversized updates not sent................... 0&lt;/P&gt;&lt;P&gt;Sync at risk:&lt;BR /&gt;Sent reject notifications.................... 0&lt;BR /&gt;Received reject notifications................ 0&lt;/P&gt;&lt;P&gt;Sent messages:&lt;BR /&gt;Total generated sync messages................ 4719247&lt;BR /&gt;Sent retransmission requests................. 42&lt;BR /&gt;Sent retransmission updates.................. 31&lt;BR /&gt;Peak fragments per update.................... 1&lt;/P&gt;&lt;P&gt;Received messages:&lt;BR /&gt;Total received updates....................... 306886&lt;BR /&gt;Received retransmission requests............. 20&lt;/P&gt;&lt;P&gt;Sync Interface:&lt;BR /&gt;Name......................................... eth1&lt;BR /&gt;Link speed................................... 2▒|▒&lt;BR /&gt;Rate......................................... 351020[Bps]&lt;BR /&gt;Peak rate.................................... 449670[Bps]&lt;BR /&gt;Link usage................................... 0%&lt;BR /&gt;Total........................................ 220568[MB]&lt;/P&gt;&lt;P&gt;Queue sizes (num of updates):&lt;BR /&gt;Sending queue size........................... 512&lt;BR /&gt;Receiving queue size......................... 256&lt;BR /&gt;Fragments queue size......................... 50&lt;/P&gt;&lt;P&gt;Timers:&lt;BR /&gt;Delta Sync interval (ms)..................... 100&lt;/P&gt;</description>
      <pubDate>Wed, 19 Jul 2023 01:20:09 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/ClusterXL-not-failing-over-when-interface-down/m-p/186783#M31206</guid>
      <dc:creator>jimm</dc:creator>
      <dc:date>2023-07-19T01:20:09Z</dc:date>
    </item>
    <item>
      <title>Re: ClusterXL not failing over when interface down</title>
      <link>https://community.checkpoint.com/t5/General-Topics/ClusterXL-not-failing-over-when-interface-down/m-p/186784#M31207</link>
      <description>&lt;P&gt;For future reference, as of R80 we only support a single sync interface, and recommend it to be dedicated to the purpose (so not also a cluster interface with a VIP that passes traffic).&lt;/P&gt;
&lt;P&gt;If you require redundant sync paths, you can use a bond. Details on options are in the ClusterXL Admin Guide for your version.&lt;/P&gt;</description>
      <pubDate>Wed, 19 Jul 2023 01:54:00 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/ClusterXL-not-failing-over-when-interface-down/m-p/186784#M31207</guid>
      <dc:creator>emmap</dc:creator>
      <dc:date>2023-07-19T01:54:00Z</dc:date>
    </item>
    <item>
      <title>Re: ClusterXL not failing over when interface down</title>
      <link>https://community.checkpoint.com/t5/General-Topics/ClusterXL-not-failing-over-when-interface-down/m-p/186785#M31208</link>
      <description>&lt;P&gt;I recall single sync interface support even before R55...maybe recommended (not 100% positive), but redundant sync interface setup always had issues.&lt;/P&gt;
&lt;P&gt;Andy&lt;/P&gt;</description>
      <pubDate>Wed, 19 Jul 2023 02:05:43 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/ClusterXL-not-failing-over-when-interface-down/m-p/186785#M31208</guid>
      <dc:creator>the_rock</dc:creator>
      <dc:date>2023-07-19T02:05:43Z</dc:date>
    </item>
    <item>
      <title>Re: ClusterXL not failing over when interface down</title>
      <link>https://community.checkpoint.com/t5/General-Topics/ClusterXL-not-failing-over-when-interface-down/m-p/186814#M31217</link>
      <description>&lt;P&gt;It sound to me, your SMS is only connected to one of the cluster members. Is this right? Can you please share a diagram with your setup?&lt;/P&gt;</description>
      <pubDate>Wed, 19 Jul 2023 09:50:03 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/ClusterXL-not-failing-over-when-interface-down/m-p/186814#M31217</guid>
      <dc:creator>_Val_</dc:creator>
      <dc:date>2023-07-19T09:50:03Z</dc:date>
    </item>
  </channel>
</rss>

