topic Re: clusterXL - show VIP - show prio in General Topics

clusterXL - show VIP - show prio

S_E_ — Wed, 05 Feb 2025 12:59:05 GMT

Hi,

perhaps a stupid question. Running clusterXL (R81.10) in active/standby mode.

Is there any chance to verify that the VIP is really on the active device? Any chance to see the priority of the device.

e.g.

VIP = 1.1.1.1

FW1= 1.1.1.2

FW2= 1.1.1.3

"cphaprob -a" if shows the Virtual cluster interfaces:

eth1-01 1.1.1.1

cphaprob stat shows active or standby.

1 1.1.1.1 100% ACTIVE fw1
2 (local) 1.1.1.2 0% STANDBY fw2

But how to check if 1.1.1.1 is really on fw1 ? How to see the priority ?Is there any command? Tried to avoid zdebug for such a thing...

I mean the 'real status' and not the 'configured' status.

Regards

Re: clusterXL - show VIP - show prio

Chris_Atkinson — Wed, 05 Feb 2025 14:09:10 GMT

Depending on the cluster mode the ID value will indicate the priority.

"cphaprob stat" output is the current state not as configured.

Some other helpful commands:

cphaprob -a if

cphaprob roles

If you really want to go a step further looking at arp entries & mac addresses will tell you what the network thinks.

Re: clusterXL - show VIP - show prio

the_rock — Wed, 05 Feb 2025 14:24:37 GMT

Chris is correct.

Andy

[Expert@CP-FW-01:0]# cphaprob -a if

CCP mode: Manual (Unicast)
Required interfaces: 4
Required secured interfaces: 1

Interface Name: Status:

eth0 (LM) UP
eth1 (LM) UP
eth2 (LM) UP
eth3 (S) UP

S - sync, HA/LS - bond type, LM - link monitor, P - probing

Virtual cluster interfaces: 3

eth0 172.16.10.246
eth1 192.168.10.246
eth2 172.31.10.246

[Expert@CP-FW-01:0]#

Re: clusterXL - show VIP - show prio

S_E_ — Thu, 06 Feb 2025 12:04:15 GMT

hm,

tried with 'arp -a | grep <IP address>'

It was not visible on fw1 or fw2.

And I could not find out the priority.

However, thanks

Regards

Re: clusterXL - show VIP - show prio

Chris_Atkinson — Thu, 06 Feb 2025 12:09:04 GMT

The priority/ID is already shown in the output of the command that you posted earlier.

Re: clusterXL - show VIP - show prio

S_E_ — Thu, 06 Feb 2025 12:15:18 GMT

Hm,

note sure if I understand.

So the prio is either 1 or 2 , correct?

Thanks

1 1.1.1.1 100% ACTIVE fw1
2 (local) 1.1.1.2 0% STANDBY fw2

Re: clusterXL - show VIP - show prio

Chris_Atkinson — Thu, 06 Feb 2025 13:42:22 GMT

Refer to the "ID" portion here:

Table: Description of the output fields

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_CLI_ReferenceGuide/Topics-CLIG/CXLG/Viewing-Cluster-State.htm