topic Re: About the display of GW configured with ClusterXL in R81.20 in General Topics

About the display of GW configured with ClusterXL in R81.20

TSOL — Mon, 26 Aug 2024 08:06:30 GMT

Hello Team

We are configuring ClusterXL and have a question because there is a GW whose cluster member status remains as '—'.

When I looked at Checkpoint's demo site, the status of the GW on SmartConsole with ClusterXL configured appears as '—' in the attached image.

Is this normal for ClusterXL?

Or should a green check mark be displayed for each cluster member to indicate normal status?

Thank you for the advice.

AkosBakos — Mon, 26 Aug 2024 08:12:47 GMT

The initiate of the SIC was successful?
- Did you test it?
Did you push policy to the new Cluster?
- If yes, can you push policy again?
  - What rules are set in the policy?
  - Maybe you locked out yourself?
    - if yes -> user #fwunloadlocal command to uninstall the policy from the GW-s
what does the #cphaprob stat say?

Can you ping the GW-s from the MGMT?

Akos

TSOL — Mon, 26 Aug 2024 09:40:30 GMT

Thank you for the advice.

Does this mean that the '-' state is not normal?

.SIC status is "trust established".

.The policy is a test policy, so it's set to any/any accept.
.No, I don't think it's locked out.
.cphaprob state is no problem, maybe.

_Val_ — Mon, 26 Aug 2024 10:20:12 GMT

Yes it is as supposed to be

AkosBakos — Mon, 26 Aug 2024 10:56:53 GMT

No, '-' this is not normal

If you choose "test sic status" it says "Communicating"

If you login to one of the cluster members, what is the exact output of the cphaprob stat command?

Cheers,

Akos