ipv6 broke sic

[Daniel_Kavan]

After I enabled ipv6, I rebooted.  After the reboot I could NOT connect to the gateway at all.   The box lost its cluster status.  I also lost SIC.   New day, new issue.  🙂

[the_rock]

Really? Thats odd...is it R81.20, R82? I had ipv6 enabled on both versions in the lab, never had an issue.

Andy

[Daniel_Kavan]

R81.20.   Yeah, it's a new one for me too.

I disabled ipv6 and everything is fine again.

Tried it again - same issue...

[the_rock]

What was the process you followed? I just tested on abother lab gw with set ipv6-state on and save config, rebooted, no issues. R81.20 jumbo 111

Andy

[Daniel_Kavan]

I tried it with set ipv6-state on as well as in the web ui same issue.  JHF105

[the_rock · Accepted solution]

Here is my question. When you do this and reboot, what does fw stat show? If its initial policy, just run fw unloadlocal, test SIC, if green, try policy.

Andy

[Daniel_Kavan]

ytmnd

[the_rock]

Since I did not google that abbreviation, no clue what it means, but glad we can help lol

Andy

[the_rock]

Who knew there is dedicated page to that abbreviation 🤣

Andy

https://en.wikipedia.org/wiki/YTMND#:~:text=YTMND%2C%20an%20initialism%20for%20%22You,zooming%20text...

[Daniel_Kavan]

I now have the Check Point ClusterXL for Bridge Active/Standby in cpconfig set to enable for one cluster and not in another.   Is it recommended or not?  I'm using a dedicated SYNC interface as well.  

[the_rock]

I would make sure they match. Just verified in my clusterxl lab and they are same on both.

Andy

[Daniel_Kavan]

So, they do match per cluster.    I have it enabled in this new cluster.   Not in an older one.

[the_rock]

Personally, as long as cluster is used and processing traffic, I would ensure those settings are the same on both members.

Andy

[Daniel_Kavan]

Agreed, just wondering if there was a preference.  This is the first I'm running it on bridge mode.

[the_rock]

I can tell you that even if certain things do not match 100%, cluster will still work, but me personally, to keep it consistent, I always recommend double checking settings do indeed match. Last thing you want if there is a failover is to find out the hard way something was missing.

Andy

[Daniel_Kavan]

Yes, both member of the cluster have the same settings.

[the_rock]

Then, all I have to say is...

ytmnd : - )

Andy

[the_rock]

Funny enough, just tested on R82 standalone and same happened. But then since it showed initial policy, I did fw unloadlocal, was able to log into smart console and install policy that was there before.

Rebooted again, still fine with ipv6 on

Andy