Changing IP ClusterXL IP addressing

[jomavilla24]

Hello Guys:

The company I work in had 1 a Cluster made of 2 security gateways, and 1 Security Management server; we moved them to a new location and the IP addressing in this new location is different than the old one. We changed the IP addresses to match the new location, we registered both security gateways in the SMS and tried to create the cluster again, but now we get an error message that says: "ClusterXL is not responding" and an X sing on both cluster members and the cluster it self (SMS seems to be fine: a green tick on it)

What can we do to activate the cluster in the new location?

PS: We were thinking to revert to factory default all components (security gateways and SMS) and re-install the licenses, is this the way to go?

Thanks

Martin.

[Maarten_Sjouw]

You did change all IP addresses on the gateways and in the Cluster object's topology?
If you really want to go and do a revert, then it would only make sense to do that on the gateways, not on the SMS as you will loose all you configuration there.
Most important is to find out why your gateways are showing the red cross.

[Wolfgang]

Did you changed addresses on your SMS and the cluster?

- is your routing correct from SMS to the main addresses of the gateways and cluster object

- check your Antispoofing configuration

- check your licenses, they must be registered to the new IP-address of SMS

- did you Reset SIC

- check your NAT rules for the changed IP addresses

Wolfgang

[jomavilla24]

Hello Wolfgang

Here the answers:

- is your routing correct from SMS to the main addresses of the gateways and cluster object.

ANSWER: Yes, as a matter of fact, the SMS is in the same subnet subnet as the security gateway's management interface and connectivity exists; but,  like I mentioned in my original post, the IP addresses of those interfaces have changed

- check your Antispoofing configuration

QUESTION: Exactly what Antisoofing configuration should I check?

- check your licenses, they must be registered to the new IP-address of SMS

ANSWER: I guess it is mandatory to re-issue the licenses if the IP address have changed right?

- did you Reset SIC

ANSWER Yes, we reset SIC using the cpconfig utility via CLISH;  and, as a matter of fact, we were able to register both security gateway in the SMS, the problem comes after we tried to re-create the CluterXL 

- check your NAT rules for the changed IP addresses

QUESTION: How come the NAT config can mess up the Cluster?

Thanks again for your hep.

Regards

Martin