topic Re: How to ensure that the network synchronization works properly in General Topics https://community.checkpoint.com/t5/General-Topics/How-to-ensure-that-the-network-synchronization-works-properly/m-p/36177#M7642 <HTML><HEAD></HEAD><BODY><P>You could run "show routed cluster-state detailed" to check if your cluster is flapping....</P></BODY></HTML> Tue, 26 Feb 2019 17:10:36 GMT Alessandro_Marr 2019-02-26T17:10:36Z How to ensure that the network synchronization works properly https://community.checkpoint.com/t5/General-Topics/How-to-ensure-that-the-network-synchronization-works-properly/m-p/36176#M7641 <HTML><HEAD></HEAD><BODY><P>Upon troubleshooting a VPN tunnel that was not being established, I came across the following error:</P><P></P><P><STRONG style="color: #000000; background-color: #ffffff; font-size: 14px;">"Packet is dropped because an IPSEC SA associated with the SPI on the received IPSEC packet could not be found."</STRONG></P><P><STRONG style="color: #000000; background-color: #ffffff; font-size: 14px;">&nbsp;</STRONG></P><P>While led me to <SPAN style="color: #000000; background-color: #ffffff; font-size: 14px;">sk19423:</SPAN></P><P></P><P><SPAN style="color: #000000; background-color: #ffffff; font-size: 14px;"><IMG class="image-1 jive-image" src="https://community.checkpoint.com/legacyfs/online/checkpoint/79393_pastedImage_1.png" /></SPAN></P><P><STRONG style="color: #000000; background-color: #ffffff; font-size: 14px;">&nbsp;</STRONG></P><P>Since the affected gateway is indeed a cluster member I would like to ensure that the synchronization network works properly to see if the scenario above applies.</P><P></P><P>My question is therefore, is there another way of checking the sync network other than running the following commands:</P><P></P><P>cphaprob -a if</P><P>cphaprob syncstat</P><P>fw ctl pstat</P><P></P><P>Might be worth noting that the gateway in question also happens to be a virtual instance.</P><P></P><P>Many thanks in advance.</P></BODY></HTML> Tue, 26 Feb 2019 10:54:53 GMT https://community.checkpoint.com/t5/General-Topics/How-to-ensure-that-the-network-synchronization-works-properly/m-p/36176#M7641 Nick_Doropoulos 2019-02-26T10:54:53Z Re: How to ensure that the network synchronization works properly https://community.checkpoint.com/t5/General-Topics/How-to-ensure-that-the-network-synchronization-works-properly/m-p/36177#M7642 <HTML><HEAD></HEAD><BODY><P>You could run "show routed cluster-state detailed" to check if your cluster is flapping....</P></BODY></HTML> Tue, 26 Feb 2019 17:10:36 GMT https://community.checkpoint.com/t5/General-Topics/How-to-ensure-that-the-network-synchronization-works-properly/m-p/36177#M7642 Alessandro_Marr 2019-02-26T17:10:36Z