https://community.checkpoint.com/t5/Hyperscale-Firewall-Maestro/Rebooting-one-of-MHOs-causing-disruption-to-VSX-management/m-p/150102#M933 <P>Hi folks,</P><P>Encountered this issue as we are about to migrate to Check Point Maestro.</P><P>We are deploying single-site dual MHOs, with a single security group of 2 SGWs. Underneath we have configured 2 VSX, VS0 as management and VS1 is being used for data traffic.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image.png" style="width: 378px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/16802i1C57B747DD081A68/image-size/large?v=v2&amp;px=999" role="button" title="image.png" alt="image.png" /></span></P><P>The management links of SecGroup are connected to Cisco FEX (in Enhanced vPC). The port-channel itself on Cisco side is configured mode On, and bonding mode for Magg is configured as XOR.</P><P>When we try to reboot MHO-02, we started seeing disruption to management IP of VS0 for about a minute (which seems longer than our expectation). Everytime, roughly 25-26 ICMP packets from outside were dropped. However, when rebooting MHO-01, such disruption did not occur.</P><P>Data was not affected in the meantime. We tried pinging from SMC (whose IP is on the same subnet as VS0's MGMT IP) and did not see any drop either.</P><P>Has anyone seen or encountered the same?</P><P>&nbsp;</P><P>Tuan</P> Fri, 03 Jun 2022 09:01:03 GMT Tuannnnnnnnn 2022-06-03T09:01:03Z https://community.checkpoint.com/t5/Hyperscale-Firewall-Maestro/Rebooting-one-of-MHOs-causing-disruption-to-VSX-management/m-p/150102#M933 <P>Hi folks,</P><P>Encountered this issue as we are about to migrate to Check Point Maestro.</P><P>We are deploying single-site dual MHOs, with a single security group of 2 SGWs. Underneath we have configured 2 VSX, VS0 as management and VS1 is being used for data traffic.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image.png" style="width: 378px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/16802i1C57B747DD081A68/image-size/large?v=v2&amp;px=999" role="button" title="image.png" alt="image.png" /></span></P><P>The management links of SecGroup are connected to Cisco FEX (in Enhanced vPC). The port-channel itself on Cisco side is configured mode On, and bonding mode for Magg is configured as XOR.</P><P>When we try to reboot MHO-02, we started seeing disruption to management IP of VS0 for about a minute (which seems longer than our expectation). Everytime, roughly 25-26 ICMP packets from outside were dropped. However, when rebooting MHO-01, such disruption did not occur.</P><P>Data was not affected in the meantime. We tried pinging from SMC (whose IP is on the same subnet as VS0's MGMT IP) and did not see any drop either.</P><P>Has anyone seen or encountered the same?</P><P>&nbsp;</P><P>Tuan</P> Fri, 03 Jun 2022 09:01:03 GMT https://community.checkpoint.com/t5/Hyperscale-Firewall-Maestro/Rebooting-one-of-MHOs-causing-disruption-to-VSX-management/m-p/150102#M933 Tuannnnnnnnn 2022-06-03T09:01:03Z