<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: vsx_util add_member_reconf in General Topics</title>
    <link>https://community.checkpoint.com/t5/General-Topics/vsx-util-add-member-reconf/m-p/36025#M7616</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Yep everything seems ok only management is configured but can' t reach step 10 of reconfigure operation , tac seems to surf in deep water for this kind of issue , let see what's happening&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Wed, 27 Feb 2019 14:19:03 GMT</pubDate>
    <dc:creator>Marco_Valenti</dc:creator>
    <dc:date>2019-02-27T14:19:03Z</dc:date>
    <item>
      <title>vsx_util add_member_reconf</title>
      <link>https://community.checkpoint.com/t5/General-Topics/vsx-util-add-member-reconf/m-p/36019#M7610</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hey there&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I'm trying to add a new member to my vsx cluster with the command vsx_util add_member_reconf , I was able to add member with vsx_util add_member but when try to reconfigure the newly added member the operation fail at step 2 , with a tcp dump I was able to confirm that the vsx gateway is sending a tcp reset when the mdm send the command to reconfigure , with vsx stat -v the vsx gateway say that is in a trust state as anyone encountered a similar behavior before?&lt;/P&gt;&lt;P&gt;Mangament is r80.20 with take 33 and vsx gateway is r80.10 with latest jumbo take 169&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 26 Feb 2019 16:52:05 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/vsx-util-add-member-reconf/m-p/36019#M7610</guid>
      <dc:creator>Marco_Valenti</dc:creator>
      <dc:date>2019-02-26T16:52:05Z</dc:date>
    </item>
    <item>
      <title>Re: vsx_util add_member_reconf</title>
      <link>https://community.checkpoint.com/t5/General-Topics/vsx-util-add-member-reconf/m-p/36020#M7611</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;It's been very long time since I have been adding new members to VSX cluster.. but my two cents..&lt;/P&gt;&lt;P&gt;Since the actual member was added in the first step successfully, you could try resetting SIC on the new member and then running vsx_util reconfigure instead. From memory .. &lt;img id="smileyhappy" class="emoticon emoticon-smileyhappy" src="https://community.checkpoint.com/i/smilies/16x16_smiley-happy.png" alt="Smiley Happy" title="Smiley Happy" /&gt;&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 26 Feb 2019 21:46:13 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/vsx-util-add-member-reconf/m-p/36020#M7611</guid>
      <dc:creator>Kaspars_Zibarts</dc:creator>
      <dc:date>2019-02-26T21:46:13Z</dc:date>
    </item>
    <item>
      <title>Re: vsx_util add_member_reconf</title>
      <link>https://community.checkpoint.com/t5/General-Topics/vsx-util-add-member-reconf/m-p/36021#M7612</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Despite what vsx admin guide say I will give a try in this way and let you know&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Wed, 27 Feb 2019 08:30:52 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/vsx-util-add-member-reconf/m-p/36021#M7612</guid>
      <dc:creator>Marco_Valenti</dc:creator>
      <dc:date>2019-02-27T08:30:52Z</dc:date>
    </item>
    <item>
      <title>Re: vsx_util add_member_reconf</title>
      <link>https://community.checkpoint.com/t5/General-Topics/vsx-util-add-member-reconf/m-p/36022#M7613</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;From memory they do the same thing except reconfigure has&amp;nbsp;couple of additional steps like SIC, converting to VSX etc whereas&amp;nbsp;&lt;SPAN style="color: #333333; background-color: #ffffff;"&gt;add_member_reconf purely pushes out VSX config omitting all the initial bits. As long as add_member worked (so your mgmt is all updated) it should be safe to push out full reconfigure. But I might be wrong &lt;img id="smileyhappy" class="emoticon emoticon-smileyhappy" src="https://community.checkpoint.com/i/smilies/16x16_smiley-happy.png" alt="Smiley Happy" title="Smiley Happy" /&gt;&amp;nbsp;we did it a lot with our Crossbeam X80 back in the day &lt;img id="smileyhappy" class="emoticon emoticon-smileyhappy" src="https://community.checkpoint.com/i/smilies/16x16_smiley-happy.png" alt="Smiley Happy" title="Smiley Happy" /&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Wed, 27 Feb 2019 08:39:33 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/vsx-util-add-member-reconf/m-p/36022#M7613</guid>
      <dc:creator>Kaspars_Zibarts</dc:creator>
      <dc:date>2019-02-27T08:39:33Z</dc:date>
    </item>
    <item>
      <title>Re: vsx_util add_member_reconf</title>
      <link>https://community.checkpoint.com/t5/General-Topics/vsx-util-add-member-reconf/m-p/36023#M7614</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Fun part is that now with reconfigure only we can reach till step 10 but the operation fail with this error&lt;/P&gt;&lt;P style="margin-bottom: .0001pt;"&gt;&lt;SPAN style="font-size: 10.0pt; color: black;"&gt;"Error retrieving policy installed on the VSX" , we have verified that there are connectivity between the gateway and the management and at the moment I was unable to see any packet originating from the vsx gateway dropped.&lt;BR /&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P style="margin-bottom: .0001pt;"&gt;&lt;SPAN style="font-size: 10.0pt; color: black;"&gt;Just a clarification if it possible , we should configure with the vsx provisioning tool the ip of the sync interface or it will be imported by the add member operation?&lt;/SPAN&gt;&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Wed, 27 Feb 2019 09:49:57 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/vsx-util-add-member-reconf/m-p/36023#M7614</guid>
      <dc:creator>Marco_Valenti</dc:creator>
      <dc:date>2019-02-27T09:49:57Z</dc:date>
    </item>
    <item>
      <title>Re: vsx_util add_member_reconf</title>
      <link>https://community.checkpoint.com/t5/General-Topics/vsx-util-add-member-reconf/m-p/36024#M7615</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;SYNC will be configured automatically, you only need to configure Mgmt IP. Make sure that your subnet is big enough to accommodate new cluster members in Sync net. Check your VSX object in SmartConsole that you see new member&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;IMG class="image-1 jive-image" src="https://community.checkpoint.com/legacyfs/online/checkpoint/79422_pastedImage_2.png" /&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;IMG class="image-3 jive-image" src="https://community.checkpoint.com/legacyfs/online/checkpoint/79424_pastedImage_4.png" /&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;then you can verify topology on the member&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;IMG class="image-2 jive-image" src="https://community.checkpoint.com/legacyfs/online/checkpoint/79423_pastedImage_3.png" /&gt;&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Wed, 27 Feb 2019 10:30:44 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/vsx-util-add-member-reconf/m-p/36024#M7615</guid>
      <dc:creator>Kaspars_Zibarts</dc:creator>
      <dc:date>2019-02-27T10:30:44Z</dc:date>
    </item>
    <item>
      <title>Re: vsx_util add_member_reconf</title>
      <link>https://community.checkpoint.com/t5/General-Topics/vsx-util-add-member-reconf/m-p/36025#M7616</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Yep everything seems ok only management is configured but can' t reach step 10 of reconfigure operation , tac seems to surf in deep water for this kind of issue , let see what's happening&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Wed, 27 Feb 2019 14:19:03 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/vsx-util-add-member-reconf/m-p/36025#M7616</guid>
      <dc:creator>Marco_Valenti</dc:creator>
      <dc:date>2019-02-27T14:19:03Z</dc:date>
    </item>
    <item>
      <title>Re: vsx_util add_member_reconf</title>
      <link>https://community.checkpoint.com/t5/General-Topics/vsx-util-add-member-reconf/m-p/36026#M7617</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;What actually happens on the gateway - can you see all VSes and routes created?&lt;/P&gt;&lt;P&gt;Tried resetgw and then reconfigure again?&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Wed, 27 Feb 2019 14:39:27 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/vsx-util-add-member-reconf/m-p/36026#M7617</guid>
      <dc:creator>Kaspars_Zibarts</dc:creator>
      <dc:date>2019-02-27T14:39:27Z</dc:date>
    </item>
    <item>
      <title>Re: vsx_util add_member_reconf</title>
      <link>https://community.checkpoint.com/t5/General-Topics/vsx-util-add-member-reconf/m-p/36027#M7618</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;after &lt;SPAN style="font-size: 10.0pt; color: black;"&gt;"Error retrieving policy installed on the VSX"&amp;nbsp; it seems to remove every configuration, I can see during the reconfigure the name of the vs passed to the new gateway then the reconfigure stop and all the configuration wen't back to the default , I have tried several time to resic the gateway without luck , the funny part is that if you try the reconfigure add member it won' t go past step 2.&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN style="font-size: 10.0pt; color: black;"&gt;Thanks for your time btw &lt;/SPAN&gt;&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 28 Feb 2019 08:00:23 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/vsx-util-add-member-reconf/m-p/36027#M7618</guid>
      <dc:creator>Marco_Valenti</dc:creator>
      <dc:date>2019-02-28T08:00:23Z</dc:date>
    </item>
    <item>
      <title>Re: vsx_util add_member_reconf</title>
      <link>https://community.checkpoint.com/t5/General-Topics/vsx-util-add-member-reconf/m-p/36028#M7619</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;And the new member is identical HW wise to old ones? Memory etc? How far does it get when creating VSes? All of them or you can see it stops at some point?&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 28 Feb 2019 08:03:09 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/vsx-util-add-member-reconf/m-p/36028#M7619</guid>
      <dc:creator>Kaspars_Zibarts</dc:creator>
      <dc:date>2019-02-28T08:03:09Z</dc:date>
    </item>
    <item>
      <title>Re: vsx_util add_member_reconf</title>
      <link>https://community.checkpoint.com/t5/General-Topics/vsx-util-add-member-reconf/m-p/36029#M7620</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;same machine same hw same build , the reconfigure fail at step 10 after pushing vs configuration , we are trying with the tac but without luck &lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 28 Feb 2019 13:46:59 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/vsx-util-add-member-reconf/m-p/36029#M7620</guid>
      <dc:creator>Marco_Valenti</dc:creator>
      <dc:date>2019-02-28T13:46:59Z</dc:date>
    </item>
    <item>
      <title>Re: vsx_util add_member_reconf</title>
      <link>https://community.checkpoint.com/t5/General-Topics/vsx-util-add-member-reconf/m-p/36030#M7621</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Did you check that you have big enough license btw? And if you have option - have you tried replicating the same in ESX?&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 28 Feb 2019 20:11:44 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/vsx-util-add-member-reconf/m-p/36030#M7621</guid>
      <dc:creator>Kaspars_Zibarts</dc:creator>
      <dc:date>2019-02-28T20:11:44Z</dc:date>
    </item>
    <item>
      <title>Re: vsx_util add_member_reconf</title>
      <link>https://community.checkpoint.com/t5/General-Topics/vsx-util-add-member-reconf/m-p/36031#M7622</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;valid license , we found that some port are missing into initial.pf we were able to reach step 10 but the issue now is error initial policy was configuraed on vsx , we are still waiting for something from the tac for more than a week let's see &lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Fri, 01 Mar 2019 08:05:12 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/vsx-util-add-member-reconf/m-p/36031#M7622</guid>
      <dc:creator>Marco_Valenti</dc:creator>
      <dc:date>2019-03-01T08:05:12Z</dc:date>
    </item>
  </channel>
</rss>

