Deploying Check Point VMSS in R80.30

[zaarshama]

Hi All,

I am trying to deploy Check Point VMSS.

autoprov_cfg init Azure -mn XXXXXXX -tn XXXXXXX -otp XXXXXXX -ver R80.30 -po XXXXXXX -cn XXXXXXX -sb XXXXXXX -at XXXXXXX -aci XXXXXXX -acs "XXXXXXX"

The two instances are up and running in Microsoft Azure however when I try to add them to CMA(which is running on MDS 5050-R80.30 on prem)

I get the following error.

tail -F /var/log/CPcme/cme.log

2020-12-15 22:00:14,109 CME_SERVICE  INFO **********    Starting loop iteration number 4 for gateway instances  **********

2020-12-15 22:00:14,109 CME_SERVICE  INFO The management runs in a MDS environment, and the domain server is XXXXXXX

2020-12-15 22:00:14,435 CME_SERVICE  INFO There are no gateways known by the management at the beginning of the iteration

2020-12-15 22:00:18,920 CME_SERVICE  ERROR Error during gateways synchronization

2020-12-15 22:00:18,923 CME_SERVICE  ERROR Error details: Traceback (most recent call last):

  File "/opt/CPcme/service/cme_service.py", line 342, in loop

    sync(c, management, gateways)

  File "/opt/CPcme/service/cme_service.py", line 242, in sync

    if controller.filter_instances():

  File "/opt/CPcme/cloud_handlers/cloud_common_handler.py", line 646, in filter_instances

    for i in self.get_instances():

  File "/opt/CPcme/cloud_handlers/azure_handler.py", line 648, in get_instances

    instances += self.get_vmss(subnets)

  File "/opt/CPcme/cloud_handlers/azure_handler.py", line 557, in get_vmss

    int(subnets[config['subnet']['id']]['properties'][

KeyError: '/subscriptions/XXXXXXX/resourceGroups/XXXXXXX/providers/Microsoft.Network/virtualNetworks/XXXXXXX/subnets/XXXXXXX'

2020-12-15 22:00:18,923 CME_SERVICE  INFO

2020-12-15 22:00:18,980 CME_SERVICE  INFO There are no gateways known by the management at the end of the iteration

2020-12-15 22:00:18,981 CME_SERVICE  INFO **********    End of the iteration number 4 for gateway instances. Iteration time: 0:00:04.871107     **********

2020-12-15 22:00:18,981 CME_SERVICE  INFO

Tried to google it but haven't found any information about this particular error.

Any help will be greatly appreciated.

Kind Regards

Zaarshama

[Dmitry_Gorn]

Hi,

This resembles an old cosmetic bug that was fixed in the latest version of CME.

Please update CME to version 126 according to these instructions, and let me know if the issue still exists.

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut... 

Thanks,

Dmitry

[zaarshama]

Hi Dmitry,

Thanks for your reply, we are already running CME take 126.

Kind Regards

Zaarshama

[Dmitry_Gorn]

Thanks Zaarshama.

Can you please open a support ticket for this issue and share the SR# here so we can check the root cause?

Thanks,

Dmitry

[asalamatov]

Is there any solution for this? We are facing same issue. CME ver 138

[Dmitry_Gorn]

Hi,

Can you please open an SR and share the SR # here so we can follow up on that?

Thanks