clusterXL - show VIP - show prio

[S_E_]

Hi,

perhaps a stupid question. Running clusterXL (R81.10) in active/standby mode.

Is there any chance to verify that the VIP is really on the active device? Any chance to see the priority of the device.

e.g.

VIP = 1.1.1.1

FW1= 1.1.1.2

FW2= 1.1.1.3

"cphaprob -a" if shows the Virtual cluster interfaces: 

eth1-01     1.1.1.1

cphaprob stat shows active or standby.

1             1.1.1.1 100% ACTIVE fw1
2 (local) 1.1.1.2     0% STANDBY fw2

But how to check if 1.1.1.1 is really on fw1 ? How to see the priority ?Is there any command? Tried to avoid zdebug for such a thing...

I mean the 'real status' and not the 'configured' status.

Regards

[Chris_Atkinson]

Depending on the cluster mode the ID value will indicate the priority.

"cphaprob stat" output is the current state not as configured. 

Some other helpful commands:

cphaprob -a if

cphaprob roles

If you really want to go a step further looking at arp entries & mac addresses will tell you what the network thinks.

[S_E_]

hm,

tried with 'arp -a | grep <IP address>'

It was not visible on fw1 or fw2.

And I could not find out the priority.

However, thanks

Regards

[Chris_Atkinson]

The priority/ID is already shown in the output of the command that you posted earlier. 

[S_E_]

Hm,

note sure if I understand. 

So the prio is either 1 or 2 , correct?

Thanks

1               1.1.1.1  100% ACTIVE fw1
2 (local)   1.1.1.2      0% STANDBY fw2

[Chris_Atkinson]

Refer to the "ID" portion here:

Table: Description of the output fields

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_CLI_ReferenceGuide/Topics-CLIG/CXL...

[the_rock]

Chris is correct.

Andy

[Expert@CP-FW-01:0]# cphaprob -a if

CCP mode: Manual (Unicast)
Required interfaces: 4
Required secured interfaces: 1

Interface Name: Status:

eth0 (LM) UP
eth1 (LM) UP
eth2 (LM) UP
eth3 (S) UP

S - sync, HA/LS - bond type, LM - link monitor, P - probing

Virtual cluster interfaces: 3

eth0 172.16.10.246
eth1 192.168.10.246
eth2 172.31.10.246

[Expert@CP-FW-01:0]#