Checkpoint Security Gateway

[gemechis]

We have deployed checkpoint maestro in our environment.  2 MHO-140's and 2 Security Gateways. 

The security gateway's were sharing a load with 50%, 50%. But last week when I checked the gateway status using asg monitor, it shows on of the gateways Down. One Active. We tried to troubleshoot, we removed the gateway from Maestro and tried to add it again, but after we removed it we could not get it on the maestro, as it is not there under unassigned gateways. All the DAC cables were connected to Maestro & SG and functioning well. 

Any help on this is appreciated. 

[AkosBakos]

Hi @gemechis 

Maybe basic question, but what is the output of the lldpctl? 

• have you tried to FCD the affected appliance (I know, you are remote, but maybe LOM is installed on the SGM) and then put the into the SG again?
• what is the lldpclt output?

Akos

[gemechis]

@AkosBakos 

The output for lldpctl is attahched here with. It shows only the other Maestro on downlink port 48, and the Activve Gateway on port 31.

[AkosBakos]

Hi,

Maybe a dummy thing, have you tried to plug and unplug the DAC?

Akos

[gemechis]

@AkosBakos 

Yes, even we have tried  by changing a new DAC cable. But it didn't workout. 

[AkosBakos]

Hi @gemechis 

We can't see the appliance in the #lldpctl. Do you see the same on both MHO?

Can you share the outputs of the MHO:

• orch_stat -a
• lldpctl

Can you reach the appliamce via LOM?

I had issues with with interface card. Tha solution was the RMA of card.

That is 100% sure the appliance up and running?

Akos