topic MHO140 / Q9800 - creating SG fail in Hyperscale Firewall (Maestro)

MHO140 / Q9800 - creating SG fail

Daniel_Hainich — Mon, 25 Nov 2024 20:30:34 GMT

Hi Guys,

iam trying to setup my new maestro environment. there are 2 mho140 in single-site-config.

mho is seeing booth q9800 as unassigned. when iam configuring the security group and assing one gw to the sg and also the mgmt-ports all seems to be fine.

the state of the gateway is changing to "joining" and i can see the following message at the cli:

Setting GW to be SGM 1_1 in security-group 1

iam waiting for a long time, about 60min. the gw dont reboot.

there are a lot of erros in the log-files:

==> liblldp.log <==
[TLV] current->next = 0
[TLV] Freeing TLV Info String.
[TLV] Freeing TLV.
[TLV] Freeing TLV List Node.
[INT] Sending LLDPDU on [ethsBP1-02]!
[EXCESSIVE] Adding index 17 with name ethsBP1-02 to global port list
[EXCESSIVE] Setting TLV Validator '127' - it's the organizational specific TLV validator...

2024-11-25 20:08:56,154 DEBUG 242: lldp_update_state(): Update state BOOTING->UNASSIGNED
2024-11-25 20:11:22,084 DEBUG 242: lldp_update_state(): Update state UNASSIGNED->JOINING

==> quick_fcd_persistent.log <==
Mon Nov 25 20:11:21 2024 MHO version has changed, old = NA, new = 1, lldp description: A111201101,A2,C1,G1,MV1,S1,S2,U_A11121,U_A11581,VERR81.20
Mon Nov 25 20:11:21 2024 Gateway id changed
Mon Nov 25 20:11:21 2024 db_sgm_id=NA, db_chassis_id=NA, db_sg_id=NA
Mon Nov 25 20:11:21 2024 lldp_sgm_id=1, lldp_chassis_id=1, lldp_sgid=1
Mon Nov 25 20:11:21 2024 my_sid='2419BA1112', my_short_sid='A1112'
Mon Nov 25 20:11:21 2024 lldp_descr='A111201101,A2,C1,G1,MV1,S1,S2,U_A11121,U_A11581,VERR81.20'

==> simple_consumer_install.log <==
Mon Nov 25 20:05:23 EST 2024 Starting post-install script
Mon Nov 25 20:05:23 EST 2024 Create link to Python library
Mon Nov 25 20:05:23 EST 2024 Register cpview_collectd service
Mon Nov 25 20:05:23 EST 2024 Disabling cpview_collectd
Shutting cpview_collectd: [ OK ]
==> smartd.log <==
Mon Nov 25 20:08:46 2024 SSM amount are different (2 != 0). Updating ssm_amount to 2
Mon Nov 25 20:08:46 2024 Successfully updated GaiaDB internal communication bindings
Mon Nov 25 20:08:46 2024 Successfully configured ssm_amount to 2
Mon Nov 25 20:11:21 2024 MHO version has changed, old = NA, new = 1, lldp description: A111201101,A2,C1,G1,MV1,S1,S2,U_A11121,U_A11581,VERR81.20
Mon Nov 25 20:11:21 2024 Gateway id changed
Mon Nov 25 20:11:21 2024 db_sgm_id=NA, db_chassis_id=NA, db_sg_id=NA
Mon Nov 25 20:11:21 2024 lldp_sgm_id=1, lldp_chassis_id=1, lldp_sgid=1
Mon Nov 25 20:11:21 2024 my_sid='2419BA1112', my_short_sid='A1112'
Mon Nov 25 20:11:21 2024 lldp_descr='A111201101,A2,C1,G1,MV1,S1,S2,U_A11121,U_A11581,VERR81.20'
Mon Nov 25 20:11:23 2024 Setting GW to be SGM 1_1 in security-group 1

==> smo_install.log <==
defaultfilter:
Compiled OK.
Generating default filter
Unable to open '/dev/fw0': No such file or directory
Unable to open '/dev/fw0': No such file or directory
Unable to open '/dev/fw0': No such file or directory
Generating initial policy
could not create new link "/opt/CPsmo-R81.20/bin/asg_dxl": target "/opt/CPsmo-R81.20/bin/dxl" doesn't exist
creating symbolic links in /usr/bin/Python/lib/python2.7/site-packages/smo
Set ssm_groups_amount to 2

==> sp_communication.log <==
2024-11-25 21:04:08,366 DEBUG 342: is_pingable(): ssm2 is not pingable. cmd=/usr/bin/cmd_check_alive ssm2, rc=0, err=, out=1

2024-11-25 21:04:09,372 DEBUG 342: is_pingable(): ssm1 is not pingable. cmd=/usr/bin/cmd_check_alive ssm1, rc=0, err=, out=1

2024-11-25 21:04:09,372 ERROR 367: get_pingable_orch_id_in_local_site(): Unable to find a pingable orchestrator in the local site
2024-11-25 21:04:13,392 DEBUG 342: is_pingable(): ssm2 is not pingable. cmd=/usr/bin/cmd_check_alive ssm2, rc=0, err=, out=1

2024-11-25 21:04:14,398 DEBUG 342: is_pingable(): ssm1 is not pingable. cmd=/usr/bin/cmd_check_alive ssm1, rc=0, err=, out=1

2024-11-25 21:04:14,398 ERROR 367: get_pingable_orch_id_in_local_site(): Unable to find a pingable orchestrator in the local site

[Expert@gw-c5eda4:0]# ping ssm2
PING ssm2 (198.51.101.254) 56(84) bytes of data.
From 198.51.101.201 icmp_seq=1 Destination Host Unreachable
From 198.51.101.201 icmp_seq=2 Destination Host Unreachable
From 198.51.101.201 icmp_seq=3 Destination Host Unreachable
From 198.51.101.201 icmp_seq=4 Destination Host Unreachable

--- ssm2 ping statistics ---
6 packets transmitted, 0 received, +4 errors, 100% packet loss, time 5004ms
, pipe 4
[Expert@gw-c5eda4:0]# ping ssm1
PING ssm1 (198.51.101.126) 56(84) bytes of data.
From 198.51.101.1 icmp_seq=1 Destination Host Unreachable
From 198.51.101.1 icmp_seq=2 Destination Host Unreachable
From 198.51.101.1 icmp_seq=3 Destination Host Unreachable
From 198.51.101.1 icmp_seq=4 Destination Host Unreachable

--- ssm1 ping statistics ---
5 packets transmitted, 0 received, +4 errors, 100% packet loss, time 4007ms
, pipe 4
[Expert@gw-c5eda4:0]#

whats wrong with my setup? what can i do? please help!

thanks daniel

Re: MHO140 / Q9800 - creating SG fail

emmap — Tue, 26 Nov 2024 05:37:18 GMT

Can you show us the 'orch_stat -a' from both MHOs? There shouldn't be anything too PII-ey in there but feel free to blur/redact things out.

Re: MHO140 / Q9800 - creating SG fail

Lesley — Tue, 26 Nov 2024 06:14:50 GMT

If you do the ping test do you see with tcpdump the traffic incoming on the destination device? Can you check if it does the correct IP is shown and no nat is done on accident?

Re: MHO140 / Q9800 - creating SG fail

Daniel_Hainich — Tue, 26 Nov 2024 06:46:09 GMT

[Expert@MHO-GAMMA:0]# orch_stat -a

Ports Status

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/1/1 | eth2-Mgmt1 | Mgmt | --- | 10G | DOWN | DOWN | PLUGGED | N/A | 10240 | 4120 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/2/1 | eth2-Mgmt2 | Mgmt | --- | 10G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/3/1 | eth2-Mgmt3 | Mgmt | --- | 10G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/4/1 | eth2-Mgmt4 | Mgmt | --- | 10G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/5/1 | eth2-05 | Uplink | --- | 10G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/6/1 | eth2-06 | Uplink | --- | 10G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/7/1 | eth2-07 | Uplink | --- | 10G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/8/1 | eth2-08 | Uplink | --- | 10G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/9/1 | eth2-09 | Uplink | --- | 10G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/10/1 | eth2-10 | Uplink | --- | 10G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/11/1 | eth2-11 | Uplink | --- | 10G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/12/1 | eth2-12 | Uplink | --- | 10G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/13/1 | eth2-13 | Uplink | --- | 10G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/14/1 | eth2-14 | Uplink | --- | 10G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/15/1 | eth2-15 | Uplink | --- | 10G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/16/1 | eth2-16 | Uplink | --- | 10G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/17/1 | eth2-17 | Uplink | --- | 10G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/18/1 | eth2-18 | Uplink | --- | 10G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/19/1 | eth2-19 | Uplink | --- | 10G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/20/1 | eth2-20 | Uplink | --- | 10G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/21/1 | eth2-21 | Uplink | --- | 10G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/22/1 | eth2-22 | Uplink | --- | 10G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/23/1 | eth2-23 | Uplink | --- | 10G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/24/1 | eth2-24 | Uplink | --- | 10G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/25/1 | eth2-25 | Uplink | --- | 10G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/26/1 | eth2-26 | Uplink | --- | 10G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/27/1 | --- | Downlink | --- | 10G | UP | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/28/1 | --- | Downlink | --- | 10G | UP | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/29/1 | --- | Downlink | --- | 10G | UP | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/30/1 | --- | Downlink | --- | 10G | UP | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/31/1 | --- | Downlink | --- | 10G | UP | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/32/1 | --- | Downlink | --- | 10G | UP | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/33/1 | --- | Downlink | --- | 10G | UP | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/34/1 | --- | Downlink | --- | 10G | UP | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/35/1 | --- | Downlink | --- | 10G | UP | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/36/1 | --- | Downlink | --- | 10G | UP | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/37/1 | --- | Downlink | --- | 10G | UP | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/38/1 | --- | Downlink | --- | 10G | UP | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/39/1 | --- | Downlink | --- | 10G | UP | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/40/1 | --- | Downlink | --- | 10G | UP | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/41/1 | --- | Downlink | --- | 10G | UP | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/42/1 | --- | Downlink | --- | 10G | UP | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/43/1 | --- | Downlink | --- | 10G | UP | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/44/1 | --- | Downlink | --- | 10G | UP | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/45/1 | --- | Downlink | --- | 10G | UP | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/46/1 | --- | Downlink | --- | 10G | UP | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/47/1 | SYNC-INT | SSM Sync | --- | 10G | UP | UP | PLUGGED | 10GB_ER_LR | 10240 | 1316 | 1327 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/48/1 | SYNC-INT | SSM Sync | --- | 10G | UP | UP | PLUGGED | 10GB_ER_LR | 10240 | 476722 | 531898 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/49/1 | eth2-49 | Uplink | --- | 100G | DOWN | DOWN | PLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/50/1 | eth2-51 | Uplink | --- | 100G | DOWN | DOWN | PLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/51/1 | eth2-53 | Uplink | --- | 100G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/52/1 | eth2-55 | Uplink | --- | 100G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/53/1 | eth2-57 | Uplink | --- | 100G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/54/1 | eth2-59 | Uplink | --- | 100G | DOWN | DOWN | UNPLUGGED | N/A | 10240 | 0 | 0 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/55/1 | ethsBP2-02 | Downlink | 1 | 100G | UP | UP | PLUGGED | 100GB_LR4_ER4 | 10240 | 3170 | 1948 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

| 2/56/1 | ethsBP2-02 | Downlink | 1 | 100G | UP | UP | PLUGGED | 100GB_CR4 | 10240 | 3251 | 1425 |

+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+

Security Groups Topology:

Security Group 1:

Management IP: xxx

Site 1:

Gateway 1: R81.20, Check Point 9800, aaa

Gateway 2: R81.20, Check Point 9800, bbb

MHO Device Status

+-------------------------------------+---------------+-------------------+

| Device Type | Serial Number | MAC Address (UID) |

+-------------------------------------+---------------+-------------------+

| Maestro Hyperscale Orchestrator 140 | ccc | mac |

+-------------------------------------+---------------+-------------------+

MHO Deployment Information

+--------+---------+-----------+------------------------+-----------------+

+--------+---------+-----------+------------------------+-----------------+

| 1_2 | 1 | 2 | 2 | 1 |

+--------+---------+-----------+------------------------+-----------------+

MHO Sync LAGs(Bonds) Status

+------------+--------+----------------+----------+--------------+------------+------------------+---------------+-----------+------------------+

+------------+--------+----------------+----------+--------------+------------+------------------+---------------+-----------+------------------+

| Local Site | UP | 2/47/1 | 0x10f00 | 47 | UP | Active | 1_1 | MHO-BETA | dl47 |

| | | 2/48/1 | 0x11000 | 48 | UP | Active | | | dl48 |

+------------+--------+----------------+----------+--------------+------------+------------------+---------------+-----------+------------------+

Gateway LAGs(Bonds) Status

+----+-----+--------+-----------+----------+--------------+----------------+------------+------------------+------------+------------------+-----------+

+----+-----+--------+-----------+----------+--------------+----------------+------------+------------------+------------+------------------+-----------+

| 1 | 1_1 | UP | FORWARD | 0x11d00 | 61 | 2/55/1 | UP | Active | fff | ethsBP2-02 | gw-c5eda4 |

+----+-----+--------+-----------+----------+--------------+----------------+------------+------------------+------------+------------------+-----------+

| 1 | 1_2 | UP | FORWARD | 0x11f00 | 63 | 2/56/1 | UP | Active | eee | ethsBP2-02 | gw-c5eb2e |

+----+-----+--------+-----------+----------+--------------+----------------+------------+------------------+------------+------------------+-----------+

LLDP Status

+---------------+--------------+-----------+--------------+------------------+---------+---------+----------------+

+---------------+--------------+-----------+--------------+------------------+---------+---------+----------------+

| 2/47/1 | 47 | MHO-BETA | Orchestrator | --- | --- | --- | ip |

+---------------+--------------+-----------+--------------+------------------+---------+---------+----------------+

| 2/48/1 | 48 | MHO-BETA | Orchestrator | --- | --- | --- | ip |

+---------------+--------------+-----------+--------------+------------------+---------+---------+----------------+

| 2/55/1 | 61 | gw-c5eda4 | GW | Check Point 9800 | R81.20 | JOINING | 0.0.0.0 |

+---------------+--------------+-----------+--------------+------------------+---------+---------+----------------+

| 2/56/1 | 63 | gw-c5eb2e | GW | Check Point 9800 | R81.20 | JOINING | 0.0.0.0 |

+---------------+--------------+-----------+--------------+------------------+---------+---------+----------------+

Re: MHO140 / Q9800 - creating SG fail

Daniel_Hainich — Tue, 26 Nov 2024 06:47:34 GMT

on the CIN-Interface there is no traffic

Re: MHO140 / Q9800 - creating SG fail

Lesley — Tue, 26 Nov 2024 06:59:50 GMT

Lets check the down link towards the sgm fw with show maestro port x/x/x optic-info

also this sk is important for down link part

https://support.checkpoint.com/results/sk/sk158652

Re: MHO140 / Q9800 - creating SG fail

emmap — Tue, 26 Nov 2024 07:14:14 GMT

Looks like from the output there you are using the line card in slot 2 on the appliance. Please instead power down the appliances, remove whatever is in slot 1, move the line card you are using from slot 2 to slot 1, leave slot 2 empty, and see how it goes.

Re: MHO140 / Q9800 - creating SG fail

Daniel_Hainich — Tue, 26 Nov 2024 08:28:56 GMT

hi, we removed the shipped 10g/25g linecard and switched the 100g linecard to slot1. now it seems to be working.

Re: MHO140 / Q9800 - creating SG fail

emmap — Tue, 26 Nov 2024 08:50:44 GMT

Good to hear, as a best practice you should always remove unused line cards from SGMs. I believe we have blanking plates available to cover the gap there if you don't have any handy.