topic Re: R77.30 High high availability cluster nodes synchronization problem in General Topics

R77.30 High high availability cluster nodes synchronization problem

Alexander_Bykov — Wed, 27 Mar 2019 15:57:46 GMT

Hello!
I have a problem with high availability cluster.
After additing 2 gatewalls to cluster have this output cphaprob state on both nodes:

There are a lot of solutions when both nodes are down, but i did not find any SK about up nodes.

SmartView monitor show same information about each node

Im sorry if any rules of community was broken by this post, but i really need a help

Re: R77.30 High high availability cluster nodes synchronization problem

Maarten_Sjouw — Wed, 27 Mar 2019 21:38:12 GMT

Did you enable cluster mode in cpconfig?
Have you pushed policy to both cluster members?
Did you just install a new Jumbo fix?
Push policy again and reboot both members.

Re: R77.30 High high availability cluster nodes synchronization problem

Vladimir — Wed, 27 Mar 2019 22:58:54 GMT

A bit more information is required for us to get an idea of what is going on.

Please describe if:

1. You are creating a cluster from the scratch and both gateways were preconfigured via FTW as a cluster members

2. If you are creating a cluster object and adding to it existing gateways

3. If you have any other check point clusters on the same VLAN

4. What is the cluster's network topology is defined as

Cheers,

Vladimir

Re: R77.30 High high availability cluster nodes synchronization problem

Alexander_Bykov — Thu, 28 Mar 2019 07:47:21 GMT

"1. You are creating a cluster from the scratch and both gateways were preconfigured via FTW as a cluster members

2. If you are creating a cluster object and adding to it existing gateways"

-I have tried both variants. Same problem each time

"3. If you have any other check point clusters on the same VLAN"

- No i have not

"4. What is the cluster's network topology is defined as"
-Simplified network plan:

Re: R77.30 High high availability cluster nodes synchronization problem

HeikoAnkenbrand — Sat, 06 Apr 2019 20:22:51 GMT

Check this:

1) ping the cluster member on sync interface and check layer 2 via arp entry:

# ping 192.168.2.101

# arp -an | grep 192.168.2.101

If you see "incompleted" then you have a layer 2 issue.

2) check the cluster ID. It sould the same on both gateways:

# tcpdump -vvv -nn -e -i eth<x> port 8116

3) check CCP protocol

# tcpdump -vvv -nn -e -i eth<x> port 8116

Re: R77.30 High high availability cluster nodes synchronization problem

HeikoAnkenbrand — Sat, 06 Apr 2019 20:28:46 GMT

Sorry here are the protocol details:

Re: R77.30 High high availability cluster nodes synchronization problem

HeikoAnkenbrand — Sat, 06 Apr 2019 20:29:14 GMT

More infos to CCP protocol and cluster ID here:

R80.x - cheat sheet - ClusterXL