Troubleshooting Azure ClusterXL
Good day fellow Check Point engineers! Remember the day when troubleshooting ClusterXL was best done with cphaprob commands and standard fw ctl debug -m cluster debugs? Nay! I say, use the old IPSO shell ICLID. "show cluster state" will show you all of your clustering woes even when your cphaprob stat is showing Active/standby with no transitions.
The things you find when you've been working the same issue for ages and decided to poke around in old IPSO shells for giggles and grins.
I think that should be enough to cluster debug:
The good old ones:
cpstat ha -f all
cphaprob –a if
fw ctl pstat
tcpdump –i ethx -vvv -e -nn port 8116
You can use the new R80.x commands:
clish -c \"show routed cluster-state detailed\"
Or for more deep debuging CCP proto:
tcpdump -nepi ethX -x port -s 0 8116 2>/dev/null | ccp_analyzer -g -c
Or my favorite command , many don't know it (for more infos see "fw ctl zdebug" Helpful Command Combinations 😞
fw ctl zdebug + sync
I don't want IPSO shell anymore:-)
Also, we really shouldn't be having people using zdebug for standard troubleshooting. Zdebug should only be used in very rare situations or if you already know the issue and want to confirm what you suspect without using full kdebugs.