topic Configuration Not Synced on Checkpoint Quantum Spark 1800 HA Setup in Spark Firewall (SMB)

Configuration Not Synced on Checkpoint Quantum Spark 1800 HA Setup

khineminn — Tue, 14 May 2024 11:47:36 GMT

I am new to Checkpoint Quantum Spark, and I am experiencing an issue where configurations are not syncing after a failover. I have set up High Availability (HA) with local management and attempted a failover, but the configuration on the primary device is not syncing to the secondary one. Is this normal, or do I need to configure the policy on both devices? Is this setup similar to VRRP?

Re: Configuration Not Synced on Checkpoint Quantum Spark 1800 HA Setup

PhoneBoy — Tue, 14 May 2024 17:48:27 GMT

My understanding is configuration is supposed to sync.
Make sure you've configured the cluster per: https://support.checkpoint.com/results/sk/sk121096
There are debug instructions below that might provide some useful information...possibly may need to involve TAC.

Re: Configuration Not Synced on Checkpoint Quantum Spark 1800 HA Setup

the_rock — Tue, 14 May 2024 18:38:44 GMT

I saw that same sk Phoneboy gave you. Debug commands should be same, but you can also try run below ones to make sure all matches.

Andy

cphaprob roles

cphaprob state

cphaprob -a if

cphaprob -i list

cphaprob -l list

cphaprob syncstat

Re: Configuration Not Synced on Checkpoint Quantum Spark 1800 HA Setup

khineminn — Wed, 15 May 2024 09:40:47 GMT

@the_rock , I have checked all command which you provided. But, unfortunately config is still not SYNC although all command outputs are same. As i noticed, config are SYNC in only a few minute after HA setup, then not SYNC anymore. Is there any special procedure to SYNC the configuration?

Re: Configuration Not Synced on Checkpoint Quantum Spark 1800 HA Setup

the_rock — Wed, 15 May 2024 10:22:45 GMT

Not that I can think of. Just make sure everything matches on both devices and that you followed sk Phoneboy gave, which also does contain debug process. Not sure if cphastop and cphastart commands wotk on SMB or not, but you can try. If reboot if possible, I would do that as well.

Otherwise, would call TAC and see if you can do remote.

Andy

Re: Configuration Not Synced on Checkpoint Quantum Spark 1800 HA Setup

sigal — Thu, 16 May 2024 05:06:02 GMT

Hi,
Configuration should synchronize in Spark cluster setup.
Your issue may be related to SIC failure between the members.
In order to verify SIC is valid you can test file copying between the members over SIC channel. This is an example of a command you can initiate from the primary member, assuming you are using default Sync settings:

cprid_util getfile -local_file /logs/test_pt -remote_file /pfrm2.0/bin/pt -server 10.231.149.2

If /logs/test_pt is successfully created then SIC and communication between the members is functioning well. If not then please issue support ticket and include return value of this command.

Thanks.

Re: Configuration Not Synced on Checkpoint Quantum Spark 1800 HA Setup

Chris_Atkinson — Thu, 16 May 2024 05:09:26 GMT

Could you also confirm the firmware version/build used, is it R81.10.10 or something else?

Re: Configuration Not Synced on Checkpoint Quantum Spark 1800 HA Setup

khineminn — Thu, 16 May 2024 05:25:48 GMT

Currently it is R81.10.08. I will upgrade to R81.10.10 and will try it.

Re: Configuration Not Synced on Checkpoint Quantum Spark 1800 HA Setup

khineminn — Thu, 16 May 2024 10:14:51 GMT

After upgrading to R81.10.10, the issue was resolved. Thanks for your support.

Re: Configuration Not Synced on Checkpoint Quantum Spark 1800 HA Setup

the_rock — Thu, 16 May 2024 11:37:20 GMT

Glad that worked for you!

Andy