topic Re: cphaprob syntax for R81.10.15 not in R81.10.xx CLI Reference Guide in Spark Firewall (SMB)

cphaprob syntax for R81.10.15 not in R81.10.xx CLI Reference Guide

G_W_Albrecht — Tue, 25 Feb 2025 12:56:02 GMT

It is a pity that the R81.10.xx CLI Reference Guide has not been updated for R81.10.15, as at least one important command is not listed. I found that in case of the cphaprob command - TAC had requested a cphaprob show_failover output, and i could not locate it in CLI Ref Guide.

In CLI Reference Guide the cphaprob syntax is given as:

cphaprob [-i[a]] [-d <device>] [-s {ok|init|problem}] [-f <file>] [-p] [register|unregister|report|list|state|if]

In CLI of a 1600 SMB the syntax is given as:

cphaprob [-vs <vsid>] state ................................. Shows cluster states of all members cphaprob [-reset [-h|-c]] [-l <count>] show_failover ........ Shows cluster failover information cphaprob names .............................................. Shows the member print mode in local logs cphaprob [-reset] [-a] syncstat ............................. Shows the Delta Sync overall statistics cphaprob [-reset] ldstat .................................... Shows the transport layer statistics cphaprob [-i[a]] [-e] [-l] list ............................. Shows Critical Devices in problem state (use the -l flag to view the full list) cphaprob [-vs all] [-a][-m] if .............................. Shows status of all cluster interfaces (use the -m flag to view VLAN monitoring mode) cphaprob show_bond [<bond_name>] ............................ Shows all monitored bond interfaces cphaprob show_bond_groups ................................... Shows all groups of bond interfaces cphaprob igmp ............................................... Shows the IGMP membership status cphaprob fcustat ............................................ Shows the Full Connectivity Upgrade statistics (when upgrading between minor versions) cphaprob tablestat .......................................... Shows the information about the cluster interfaces on all members in a table format cphaprob routedifcs ......................................... Shows the interfaces that are monitored by RouteD daemon when OSPF is configured cphaprob roles .............................................. Shows the roles of the RouteD daemon cphaprob release ............................................ Shows SW version match for all cluster members cphaprob ccp_encrypt ........................................ Shows the CCP Encryption mode cphaprob [-d|-f|-s] corr .................................... Shows the Correction Layer stats (All|Dispatcher|Firewall|SXL) cphaprob mvc ................................................ Shows the Multi-version cluster state cphaprob show_vsls_groups ................................... Shows the VSLS groups

I just wonder why such an important cluster command is not updated in the R81.10.xx CLI Reference Guide - and i am not sure that this is the only command...

Re: cphaprob syntax for R81.10.15 not in R81.10.xx CLI Reference Guide

sigal — Tue, 25 Feb 2025 12:40:16 GMT

We will review the documentation and update accordingly.

Re: cphaprob syntax for R81.10.15 not in R81.10.xx CLI Reference Guide

G_W_Albrecht — Tue, 04 Mar 2025 10:51:14 GMT

R&D has confirmed that cphaprob -reset show_failover

will only work on GAiA, but fails without error message on GAiA Embedded to reset the count actually.

Re: cphaprob syntax for R81.10.15 not in R81.10.xx CLI Reference Guide

sigal — Tue, 04 Mar 2025 11:03:41 GMT

If you need to reset the list of failover list, you can use: cphaprob -reset -h show_failover
Here is an example:

# cphaprob show_failover

Last cluster failover event:
Transition to new ACTIVE: Member 2 -> Member 1
Reason: Member state has been changed due to restart of the Cluster module
Event time: Mon Mar 3 20:37:01 2025

Cluster failover count:
Failover counter: 1
Time of counter reset: Thu Feb 27 14:41:41 2025 (manual)

Cluster failover history (last 20 failovers since reboot/reset on Thu Feb 27 14:41:33 2025):

No. Time: Transition: CPU: Reason:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1 Mon Mar 3 20:37:01 2025 Member 2 -> Member 1 00 Member state has been changed due to restart of the Cluster module

# cphaprob -reset -h show_failover

Last cluster failover event:
Transition to new ACTIVE: Member 2 -> Member 1
Reason: Member state has been changed due to restart of the Cluster module
Event time: Mon Mar 3 20:37:01 2025

Cluster failover count:
Failover counter: 1
Time of counter reset: Thu Feb 27 14:41:41 2025 (manual)

Cluster failover history (last 20 failovers since reboot/reset on Tue Mar 4 12:55:26 2025):

No. Time: Transition: CPU: Reason:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

No failover was detected since last reboot/reset

# cphaprob show_failover

Last cluster failover event:
Transition to new ACTIVE: Member 2 -> Member 1
Reason: Member state has been changed due to restart of the Cluster module
Event time: Mon Mar 3 20:37:01 2025

Cluster failover count:
Failover counter: 1
Time of counter reset: Thu Feb 27 14:41:41 2025 (manual)

Cluster failover history (last 20 failovers since reboot/reset on Tue Mar 4 12:55:26 2025):

No. Time: Transition: CPU: Reason:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

No failover was detected since last reboot/reset

I will update here once the documentation is updated with relevant data.

Re: cphaprob syntax for R81.10.15 not in R81.10.xx CLI Reference Guide

G_W_Albrecht — Thu, 06 Mar 2025 13:15:42 GMT

Yes, cphaprob -reset -h show_failover works !

Seems more GAiA gets supported with every new firmware release, the syntax is documented here:

https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_CLI_ReferenceGuide/Content/Topics-CLIG/CXLG/Viewing-Cluster-Failover-Statistics.htm?Highlight=cphaprob%20-reset%20show_failover

-h clears history

-c clears count

Re: cphaprob syntax for R81.10.15 not in R81.10.xx CLI Reference Guide

Sergei_Shir — Thu, 06 Mar 2025 18:10:01 GMT

Please submit such feedbacks in the relevant Admin Guide - they reach the Tech Writers directly.

At the top of each page, there is a small toolbar - click the envelope icon.

Thank you.

Re: cphaprob syntax for R81.10.15 not in R81.10.xx CLI Reference Guide

G_W_Albrecht — Fri, 07 Mar 2025 13:23:43 GMT

Thank you, excellent tool ! I will use it from now on.