<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: SMB cluster XL detailed logs in Spark Firewall (SMB)</title>
    <link>https://community.checkpoint.com/t5/Spark-Firewall-SMB/SMB-cluster-XL-detailed-logs/m-p/197044#M9736</link>
    <description>&lt;P&gt;Which process did you follow in attempting the upgrade?&lt;/P&gt;
&lt;P&gt;You can try checking the following log(s) for additional information to start, but you may need to consult further with TAC.&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;/var/log/messages*&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;$&lt;/SPAN&gt;&lt;SPAN&gt;FWDIR/log/sfwd.elg*&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Fri, 03 Nov 2023 14:20:08 GMT</pubDate>
    <dc:creator>Chris_Atkinson</dc:creator>
    <dc:date>2023-11-03T14:20:08Z</dc:date>
    <item>
      <title>SMB cluster XL detailed logs</title>
      <link>https://community.checkpoint.com/t5/Spark-Firewall-SMB/SMB-cluster-XL-detailed-logs/m-p/197040#M9735</link>
      <description>&lt;P&gt;Hello all,&lt;/P&gt;&lt;P&gt;I am having a hard time to find detailed logs on cluster XL events on a pair of Quantum Spark 1800 with &lt;STRONG&gt;R80.20.40 (992002691).&amp;nbsp;&lt;/STRONG&gt;I know the firmware is a bit older but I faced issues when trying to upgrade to R81.10 (basically I was unable to form a cluster after an upgrade).&lt;/P&gt;&lt;P&gt;There is a state change in output bellow and I can't find a reason what happened and what it means&amp;nbsp;State change: ACTIVE(!) -&amp;gt; ACTIVE&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;How can I find more details on this platform ? There is nothing interesting in /var/log/messages and&amp;nbsp;&lt;/P&gt;&lt;P&gt;Gaia clish &amp;lt;show cluster member&amp;gt; doesn't work on Spark.&lt;/P&gt;&lt;P&gt;Thank You.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;[Expert@gw1]#cphaprob stat&lt;/P&gt;&lt;P&gt;Cluster Mode: High Availability (Active Up) with IGMP Membership&lt;/P&gt;&lt;P&gt;ID Unique Address Assigned Load State&lt;/P&gt;&lt;P&gt;1 (local) 10.231.149.1 100% ACTIVE&lt;BR /&gt;2 10.231.149.2 0% STANDBY&lt;/P&gt;&lt;P&gt;&lt;BR /&gt;Active PNOTEs: None&lt;/P&gt;&lt;P&gt;Last member state change event:&lt;BR /&gt;Event Code: CLUS-114904&lt;BR /&gt;State change: ACTIVE(!) -&amp;gt; ACTIVE&lt;BR /&gt;Reason for state change: Reason for ACTIVE! alert has been resolved&lt;BR /&gt;Event time: Fri Nov 3 13:09:43 2023&lt;/P&gt;&lt;P&gt;Last cluster failover event:&lt;BR /&gt;Transition to new ACTIVE: Member 2 -&amp;gt; Member 1&lt;BR /&gt;Reason: Incorrect configuration - Local cluster member has fewer cluster interfaces configured compared to other cluster member(s)&lt;BR /&gt;Event time: Fri Nov 3 10:59:24 2023&lt;/P&gt;&lt;P&gt;Cluster failover count:&lt;BR /&gt;Failover counter: 20&lt;BR /&gt;Time of counter reset: Fri Nov 3 13:09:43 2023 (reboot)&lt;/P&gt;&lt;P&gt;&lt;BR /&gt;[Expert@gw1]# cphaprob show_failover&lt;/P&gt;&lt;P&gt;Last cluster failover event:&lt;BR /&gt;Transition to new ACTIVE: Member 2 -&amp;gt; Member 1&lt;BR /&gt;Reason: Incorrect configuration - Local cluster member has fewer cluster interfaces configured compared to other cluster member(s)&lt;BR /&gt;Event time: Fri Nov 3 10:59:24 2023&lt;/P&gt;&lt;P&gt;Cluster failover count:&lt;BR /&gt;Failover counter: 20&lt;BR /&gt;Time of counter reset: Fri Nov 3 13:09:43 2023 (reboot)&lt;/P&gt;&lt;P&gt;&lt;BR /&gt;Cluster failover history (last 20 failovers since reboot/reset on Fri Nov 3 13:09:43 2023):&lt;/P&gt;&lt;P&gt;No. Time: Transition: CPU: Reason:&lt;BR /&gt;- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -&lt;BR /&gt;1 Fri Nov 3 10:59:24 2023 Member 2 -&amp;gt; Member 1 00 Incorrect configuration - Local cluster member has fewer cluster interfaces configured compared to other cluster member(s)&lt;BR /&gt;2 Thu Oct 5 20:54:38 2023 Member 1 -&amp;gt; Member 2 00 Incorrect configuration - Local cluster member has fewer cluster interfaces configured compared to other cluster member(s)&lt;BR /&gt;3 Sun Sep 17 12:49:25 2023 Member 2 -&amp;gt; Member 1 00 Interface LANBOND0 is down (Cluster Control Protocol packets are not received)&lt;BR /&gt;4 Sun Sep 17 11:44:53 2023 Member 1 -&amp;gt; Member 2 00 Incorrect configuration - Local cluster member has fewer cluster interfaces configured compared to other cluster member(s)&lt;/P&gt;</description>
      <pubDate>Fri, 03 Nov 2023 13:20:04 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Spark-Firewall-SMB/SMB-cluster-XL-detailed-logs/m-p/197040#M9735</guid>
      <dc:creator>vladdar</dc:creator>
      <dc:date>2023-11-03T13:20:04Z</dc:date>
    </item>
    <item>
      <title>Re: SMB cluster XL detailed logs</title>
      <link>https://community.checkpoint.com/t5/Spark-Firewall-SMB/SMB-cluster-XL-detailed-logs/m-p/197044#M9736</link>
      <description>&lt;P&gt;Which process did you follow in attempting the upgrade?&lt;/P&gt;
&lt;P&gt;You can try checking the following log(s) for additional information to start, but you may need to consult further with TAC.&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;/var/log/messages*&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;$&lt;/SPAN&gt;&lt;SPAN&gt;FWDIR/log/sfwd.elg*&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Fri, 03 Nov 2023 14:20:08 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Spark-Firewall-SMB/SMB-cluster-XL-detailed-logs/m-p/197044#M9736</guid>
      <dc:creator>Chris_Atkinson</dc:creator>
      <dc:date>2023-11-03T14:20:08Z</dc:date>
    </item>
    <item>
      <title>Re: SMB cluster XL detailed logs</title>
      <link>https://community.checkpoint.com/t5/Spark-Firewall-SMB/SMB-cluster-XL-detailed-logs/m-p/197047#M9737</link>
      <description>&lt;P&gt;Thank you, looks like I have found something in&amp;nbsp;&lt;SPAN&gt;$&lt;/SPAN&gt;&lt;SPAN&gt;FWDIR/log/sfwd.elg*&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;nothing in&amp;nbsp;/var/log/messages*&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;Altough, I do not fully understand it. Something happened in that vlan, could it affect the whole cluster (other vlans) ? Unfortunately, logs on primary member have rotated so I don't have them.&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:33] Cluster member status changed from STANDBY to DOWN.&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Detected route change:&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Op=route-del&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Interface=LANBOND0.3&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Dst=10.0.0.96&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Mask=255.255.255.248&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Gateway=10.3.3.2&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Detected route change:&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Op=route-del&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Interface=LANBOND0.3&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Dst=10.0.0.104&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Mask=255.255.255.248&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Gateway=10.3.3.2&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Detected route change:&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Op=route-del&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Interface=LANBOND0.3&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Dst=10.0.0.248&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Mask=255.255.255.248&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Gateway=10.3.3.2&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Detected route change:&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Op=route-del&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Interface=LANBOND0.3&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Dst=10.0.6.0&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Mask=255.255.255.0&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Gateway=10.3.3.2&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Detected route change:&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Op=route-del&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Interface=LANBOND0.3&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Dst=10.2.0.0&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Mask=255.255.0.0&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Gateway=10.3.3.2&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:34] Cluster member status changed from DOWN to STANDBY.&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:03:37] Requesting settings synchronization from cluster peer.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Detected route change:&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Op=route-add&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Interface=LANBOND0.3&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Dst=10.0.0.96&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Mask=255.255.255.248&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Gateway=10.3.3.2&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Detected route change:&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Op=route-add&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Interface=LANBOND0.3&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Dst=10.0.0.104&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Mask=255.255.255.248&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Gateway=10.3.3.2&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Detected route change:&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Op=route-add&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Interface=LANBOND0.3&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Dst=10.0.0.248&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Mask=255.255.255.248&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Gateway=10.3.3.2&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Detected route change:&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Op=route-add&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Interface=LANBOND0.3&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Dst=10.0.6.0&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Mask=255.255.255.0&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Gateway=10.3.3.2&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Detected route change:&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Op=route-add&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Interface=LANBOND0.3&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Dst=10.2.0.0&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Mask=255.255.0.0&lt;BR /&gt;[sfwd 9105 4154539136]@gw2[3 Nov 13:09:44] Gateway=10.3.3.2&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Fri, 03 Nov 2023 14:53:20 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Spark-Firewall-SMB/SMB-cluster-XL-detailed-logs/m-p/197047#M9737</guid>
      <dc:creator>vladdar</dc:creator>
      <dc:date>2023-11-03T14:53:20Z</dc:date>
    </item>
    <item>
      <title>Re: SMB cluster XL detailed logs</title>
      <link>https://community.checkpoint.com/t5/Spark-Firewall-SMB/SMB-cluster-XL-detailed-logs/m-p/197070#M9739</link>
      <description>&lt;P&gt;Any changes to the interfaces/VLANs is likely to impact cluster state.&lt;/P&gt;</description>
      <pubDate>Fri, 03 Nov 2023 19:20:20 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Spark-Firewall-SMB/SMB-cluster-XL-detailed-logs/m-p/197070#M9739</guid>
      <dc:creator>PhoneBoy</dc:creator>
      <dc:date>2023-11-03T19:20:20Z</dc:date>
    </item>
  </channel>
</rss>

