About the display of GW configured with ClusterXL in R81.20

[TSOL]

Hello Team

We are configuring ClusterXL and have a question because there is a GW whose cluster member status remains as '—'.

When I looked at Checkpoint's demo site, the status of the GW on SmartConsole with ClusterXL configured appears as '—' in the attached image.

Is this normal for ClusterXL?

Or should a green check mark be displayed for each cluster member to indicate normal status?

Thank you for the advice.

[AkosBakos]

Hi @TSOL 

• The initiate of the SIC was successful?
  • Did you test it?
• Did you push policy to the new Cluster?
  • If yes, can you push policy again?
    • What rules are set in the policy? 
    • Maybe you locked out yourself?
      • if yes -> user #fwunloadlocal command to uninstall the policy from the GW-s
• what does the #cphaprob stat say?

Can you ping the GW-s from the MGMT?

Akos

[TSOL]

Thank you for the advice.

Does this mean that the '-' state is not normal?

.SIC status is "trust established".

.The policy is a test policy, so it's set to any/any accept.
.No, I don't think it's locked out.
.cphaprob state is no problem, maybe.

[AkosBakos]

Hi @TSOL 

No, '-' this is not normal

If you choose "test sic status" it says "Communicating"

If you login to one of the cluster members, what is the exact output of the cphaprob stat command?

Cheers,

Akos

[_Val_ · Accepted solution]

Yes it is as supposed to be