Can anyone help with a strange problem we are experiencing.
Smartview Monitor has started mis-reporting the number of remote user tunnels.
the actual number of connected users is only 12, but cluster member A is saying 383, and cluster member B is showing 208 ? if the gateways are restarted or cpstop/cpstart the number changes again.
it is definitely a gateway issue and not a management/smartconsole issue. on each gateway if I run the following command - cpstat -f all vpn and check the value of 'IPsec number of VPN-1 RA peers" I get the same result shown above, e.g. 383 on the A member.
if I run the following command:
fw tab -t userc_users -s
this shows the correct number of connected remote access users under the #VALS column.
anyone seen this before and know of a fix ? looks like we need to reset the count somewhere.
We have seen this behaviour on two of our clustered gateways and first occurred after upgrade from R77.30. One pair of clusters is running R80.10 with JHFA 189, the other is R80.20 with JHFA 33 and both are exhibiting the same issue.