This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
ABOUT CHECKMATES CYBER SECURITY COMMUNITY & FAQ
Create a Post
Help
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Daniel_Hainich
Collaborator
Monday
Jump to solution

MHO140 / Q9800 - creating SG fail

Hi Guys,

iam trying to setup my new maestro environment. there are 2 mho140 in single-site-config.

mho is seeing booth q9800 as unassigned. when iam configuring the security group and assing one gw to the sg and also the mgmt-ports all seems to be fine.

the state of the gateway is changing to "joining" and i can see the following message at the cli:

 

Setting GW to be SGM 1_1 in security-group 1

 

iam waiting for a long time, about 60min. the gw dont reboot. 

there are a lot of erros in the log-files:

 

==> liblldp.log <==
[TLV] current->next = 0
[TLV] Freeing TLV Info String.
[TLV] Freeing TLV.
[TLV] Freeing TLV List Node.
[INT] Sending LLDPDU on [ethsBP1-02]!
[EXCESSIVE] Adding index 17 with name ethsBP1-02 to global port list
[EXCESSIVE] Setting TLV Validator '127' - it's the organizational specific TLV validator...

2024-11-25 20:08:56,154 DEBUG 242: lldp_update_state(): Update state BOOTING->UNASSIGNED
2024-11-25 20:11:22,084 DEBUG 242: lldp_update_state(): Update state UNASSIGNED->JOINING


==> quick_fcd_persistent.log <==
Mon Nov 25 20:11:21 2024 MHO version has changed, old = NA, new = 1, lldp description: A111201101,A2,C1,G1,MV1,S1,S2,U_A11121,U_A11581,VERR81.20
Mon Nov 25 20:11:21 2024 Gateway id changed
Mon Nov 25 20:11:21 2024 db_sgm_id=NA, db_chassis_id=NA, db_sg_id=NA
Mon Nov 25 20:11:21 2024 lldp_sgm_id=1, lldp_chassis_id=1, lldp_sgid=1
Mon Nov 25 20:11:21 2024 my_sid='2419BA1112', my_short_sid='A1112'
Mon Nov 25 20:11:21 2024 lldp_descr='A111201101,A2,C1,G1,MV1,S1,S2,U_A11121,U_A11581,VERR81.20'


==> simple_consumer_install.log <==
Mon Nov 25 20:05:23 EST 2024 Starting post-install script
Mon Nov 25 20:05:23 EST 2024 Create link to Python library
Mon Nov 25 20:05:23 EST 2024 Register cpview_collectd service
Mon Nov 25 20:05:23 EST 2024 Disabling cpview_collectd
Shutting cpview_collectd: [ OK ]
==> smartd.log <==
Mon Nov 25 20:08:46 2024 SSM amount are different (2 != 0). Updating ssm_amount to 2
Mon Nov 25 20:08:46 2024 Successfully updated GaiaDB internal communication bindings
Mon Nov 25 20:08:46 2024 Successfully configured ssm_amount to 2
Mon Nov 25 20:11:21 2024 MHO version has changed, old = NA, new = 1, lldp description: A111201101,A2,C1,G1,MV1,S1,S2,U_A11121,U_A11581,VERR81.20
Mon Nov 25 20:11:21 2024 Gateway id changed
Mon Nov 25 20:11:21 2024 db_sgm_id=NA, db_chassis_id=NA, db_sg_id=NA
Mon Nov 25 20:11:21 2024 lldp_sgm_id=1, lldp_chassis_id=1, lldp_sgid=1
Mon Nov 25 20:11:21 2024 my_sid='2419BA1112', my_short_sid='A1112'
Mon Nov 25 20:11:21 2024 lldp_descr='A111201101,A2,C1,G1,MV1,S1,S2,U_A11121,U_A11581,VERR81.20'
Mon Nov 25 20:11:23 2024 Setting GW to be SGM 1_1 in security-group 1

 

==> smo_install.log <==
defaultfilter:
Compiled OK.
Generating default filter
Unable to open '/dev/fw0': No such file or directory
Unable to open '/dev/fw0': No such file or directory
Unable to open '/dev/fw0': No such file or directory
Generating initial policy
could not create new link "/opt/CPsmo-R81.20/bin/asg_dxl": target "/opt/CPsmo-R81.20/bin/dxl" doesn't exist
creating symbolic links in /usr/bin/Python/lib/python2.7/site-packages/smo
Set ssm_groups_amount to 2

==> sp_communication.log <==
2024-11-25 21:04:08,366 DEBUG 342: is_pingable(): ssm2 is not pingable. cmd=/usr/bin/cmd_check_alive ssm2, rc=0, err=, out=1

2024-11-25 21:04:09,372 DEBUG 342: is_pingable(): ssm1 is not pingable. cmd=/usr/bin/cmd_check_alive ssm1, rc=0, err=, out=1

2024-11-25 21:04:09,372 ERROR 367: get_pingable_orch_id_in_local_site(): Unable to find a pingable orchestrator in the local site
2024-11-25 21:04:13,392 DEBUG 342: is_pingable(): ssm2 is not pingable. cmd=/usr/bin/cmd_check_alive ssm2, rc=0, err=, out=1

2024-11-25 21:04:14,398 DEBUG 342: is_pingable(): ssm1 is not pingable. cmd=/usr/bin/cmd_check_alive ssm1, rc=0, err=, out=1

2024-11-25 21:04:14,398 ERROR 367: get_pingable_orch_id_in_local_site(): Unable to find a pingable orchestrator in the local site

 

[Expert@gw-c5eda4:0]# ping ssm2
PING ssm2 (198.51.101.254) 56(84) bytes of data.
From 198.51.101.201 icmp_seq=1 Destination Host Unreachable
From 198.51.101.201 icmp_seq=2 Destination Host Unreachable
From 198.51.101.201 icmp_seq=3 Destination Host Unreachable
From 198.51.101.201 icmp_seq=4 Destination Host Unreachable

--- ssm2 ping statistics ---
6 packets transmitted, 0 received, +4 errors, 100% packet loss, time 5004ms
, pipe 4
[Expert@gw-c5eda4:0]# ping ssm1
PING ssm1 (198.51.101.126) 56(84) bytes of data.
From 198.51.101.1 icmp_seq=1 Destination Host Unreachable
From 198.51.101.1 icmp_seq=2 Destination Host Unreachable
From 198.51.101.1 icmp_seq=3 Destination Host Unreachable
From 198.51.101.1 icmp_seq=4 Destination Host Unreachable

--- ssm1 ping statistics ---
5 packets transmitted, 0 received, +4 errors, 100% packet loss, time 4007ms
, pipe 4
[Expert@gw-c5eda4:0]#

 

whats wrong with my setup? what can i do? please help!

thanks daniel

1 Solution

Accepted Solutions
Daniel_Hainich
Collaborator
yesterday
In response to emmap
Jump to solution

hi, we removed the shipped 10g/25g linecard and switched the 100g linecard to slot1. now it seems to be working.

View solution in original post

0 Kudos
8 Replies
emmap
Employee
Employee
Monday
Jump to solution

Can you show us the 'orch_stat -a' from both MHOs? There shouldn't be anything too PII-ey in there but feel free to blur/redact things out. 

0 Kudos
Daniel_Hainich
Collaborator
Monday
In response to emmap
Jump to solution

[Expert@MHO-GAMMA:0]# orch_stat -a
 
Ports Status
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| Physical Port | Interface Name | Type     | SG  | QSFP Mode | Admin State | Link State | Transceiver State | Operating Speed | MTU   | RX Frames | TX Frames |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/1/1         | eth2-Mgmt1     | Mgmt     | --- | 10G       | DOWN        | DOWN       | PLUGGED           | N/A             | 10240 | 4120      | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/2/1         | eth2-Mgmt2     | Mgmt     | --- | 10G       | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/3/1         | eth2-Mgmt3     | Mgmt     | --- | 10G       | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/4/1         | eth2-Mgmt4     | Mgmt     | --- | 10G       | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/5/1         | eth2-05        | Uplink   | --- | 10G       | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/6/1         | eth2-06        | Uplink   | --- | 10G       | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/7/1         | eth2-07        | Uplink   | --- | 10G       | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/8/1         | eth2-08        | Uplink   | --- | 10G       | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/9/1         | eth2-09        | Uplink   | --- | 10G       | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/10/1        | eth2-10        | Uplink   | --- | 10G       | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/11/1        | eth2-11        | Uplink   | --- | 10G       | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/12/1        | eth2-12        | Uplink   | --- | 10G       | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/13/1        | eth2-13        | Uplink   | --- | 10G       | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/14/1        | eth2-14        | Uplink   | --- | 10G       | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/15/1        | eth2-15        | Uplink   | --- | 10G       | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/16/1        | eth2-16        | Uplink   | --- | 10G       | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/17/1        | eth2-17        | Uplink   | --- | 10G       | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/18/1        | eth2-18        | Uplink   | --- | 10G       | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/19/1        | eth2-19        | Uplink   | --- | 10G       | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/20/1        | eth2-20        | Uplink   | --- | 10G       | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/21/1        | eth2-21        | Uplink   | --- | 10G       | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/22/1        | eth2-22        | Uplink   | --- | 10G       | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/23/1        | eth2-23        | Uplink   | --- | 10G       | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/24/1        | eth2-24        | Uplink   | --- | 10G       | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/25/1        | eth2-25        | Uplink   | --- | 10G       | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/26/1        | eth2-26        | Uplink   | --- | 10G       | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/27/1        | ---            | Downlink | --- | 10G       | UP          | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/28/1        | ---            | Downlink | --- | 10G       | UP          | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/29/1        | ---            | Downlink | --- | 10G       | UP          | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/30/1        | ---            | Downlink | --- | 10G       | UP          | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/31/1        | ---            | Downlink | --- | 10G       | UP          | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/32/1        | ---            | Downlink | --- | 10G       | UP          | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/33/1        | ---            | Downlink | --- | 10G       | UP          | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/34/1        | ---            | Downlink | --- | 10G       | UP          | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/35/1        | ---            | Downlink | --- | 10G       | UP          | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/36/1        | ---            | Downlink | --- | 10G       | UP          | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/37/1        | ---            | Downlink | --- | 10G       | UP          | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/38/1        | ---            | Downlink | --- | 10G       | UP          | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/39/1        | ---            | Downlink | --- | 10G       | UP          | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/40/1        | ---            | Downlink | --- | 10G       | UP          | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/41/1        | ---            | Downlink | --- | 10G       | UP          | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/42/1        | ---            | Downlink | --- | 10G       | UP          | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/43/1        | ---            | Downlink | --- | 10G       | UP          | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/44/1        | ---            | Downlink | --- | 10G       | UP          | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/45/1        | ---            | Downlink | --- | 10G       | UP          | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/46/1        | ---            | Downlink | --- | 10G       | UP          | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/47/1        | SYNC-INT       | SSM Sync | --- | 10G       | UP          | UP         | PLUGGED           | 10GB_ER_LR      | 10240 | 1316      | 1327      |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/48/1        | SYNC-INT       | SSM Sync | --- | 10G       | UP          | UP         | PLUGGED           | 10GB_ER_LR      | 10240 | 476722    | 531898    |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/49/1        | eth2-49        | Uplink   | --- | 100G      | DOWN        | DOWN       | PLUGGED           | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/50/1        | eth2-51        | Uplink   | --- | 100G      | DOWN        | DOWN       | PLUGGED           | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/51/1        | eth2-53        | Uplink   | --- | 100G      | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/52/1        | eth2-55        | Uplink   | --- | 100G      | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/53/1        | eth2-57        | Uplink   | --- | 100G      | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/54/1        | eth2-59        | Uplink   | --- | 100G      | DOWN        | DOWN       | UNPLUGGED         | N/A             | 10240 | 0         | 0         |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/55/1        | ethsBP2-02     | Downlink | 1   | 100G      | UP          | UP         | PLUGGED           | 100GB_LR4_ER4   | 10240 | 3170      | 1948      |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
| 2/56/1        | ethsBP2-02     | Downlink | 1   | 100G      | UP          | UP         | PLUGGED           | 100GB_CR4       | 10240 | 3251      | 1425      |
+---------------+----------------+----------+-----+-----------+-------------+------------+-------------------+-----------------+-------+-----------+-----------+
 
 
Security Groups Topology:
Security Group 1:
Management IP: xxx
Site 1:
Gateway 1: R81.20, Check Point 9800, aaa
Gateway 2: R81.20, Check Point 9800, bbb
 
MHO Device Status
+-------------------------------------+---------------+-------------------+
| Device Type                         | Serial Number | MAC Address (UID) |
+-------------------------------------+---------------+-------------------+
| Maestro Hyperscale Orchestrator 140 | ccc  | mac |
+-------------------------------------+---------------+-------------------+
 
 
MHO Deployment Information
+--------+---------+-----------+------------------------+-----------------+
| MHO ID | Site ID | Member ID | Number of MHOs on site | Number of Sites |
+--------+---------+-----------+------------------------+-----------------+
| 1_2    | 1       | 2         | 2                      | 1               |
+--------+---------+-----------+------------------------+-----------------+
 
 
MHO Sync LAGs(Bonds) Status
+------------+--------+----------------+----------+--------------+------------+------------------+---------------+-----------+------------------+
| Sync Type  | Status | Physical Ports | Ports ID | Logical Port | Link State | Membership State | Remote MHO ID | Host Name | Remote Interface |
+------------+--------+----------------+----------+--------------+------------+------------------+---------------+-----------+------------------+
| Local Site | UP     | 2/47/1         | 0x10f00  | 47           | UP         | Active           | 1_1           | MHO-BETA  | dl47             |
|            |        | 2/48/1         | 0x11000  | 48           | UP         | Active           |               |           | dl48             |
+------------+--------+----------------+----------+--------------+------------+------------------+---------------+-----------+------------------+
 
 
Gateway LAGs(Bonds) Status
+----+-----+--------+-----------+----------+--------------+----------------+------------+------------------+------------+------------------+-----------+
| SG | GW  | Status | LSP State | Ports ID | Logical Port | Physical Ports | Link State | Membership State | Serial     | Remote Interface | Host Name |
+----+-----+--------+-----------+----------+--------------+----------------+------------+------------------+------------+------------------+-----------+
| 1  | 1_1 | UP     | FORWARD   | 0x11d00  | 61           | 2/55/1         | UP         | Active           | fff | ethsBP2-02       | gw-c5eda4 |
+----+-----+--------+-----------+----------+--------------+----------------+------------+------------------+------------+------------------+-----------+
| 1  | 1_2 | UP     | FORWARD   | 0x11f00  | 63           | 2/56/1         | UP         | Active           | eee | ethsBP2-02       | gw-c5eb2e |
+----+-----+--------+-----------+----------+--------------+----------------+------------+------------------+------------+------------------+-----------+
 
 
LLDP Status
+---------------+--------------+-----------+--------------+------------------+---------+---------+----------------+
| Physical Port | Logical Port | Hostname  | Type         | HW Type          | Version | State   | IP             |
+---------------+--------------+-----------+--------------+------------------+---------+---------+----------------+
| 2/47/1        | 47           | MHO-BETA  | Orchestrator | ---              | ---     | ---     | ip |
+---------------+--------------+-----------+--------------+------------------+---------+---------+----------------+
| 2/48/1        | 48           | MHO-BETA  | Orchestrator | ---              | ---     | ---     | ip |
+---------------+--------------+-----------+--------------+------------------+---------+---------+----------------+
| 2/55/1        | 61           | gw-c5eda4 | GW           | Check Point 9800 | R81.20  | JOINING | 0.0.0.0        |
+---------------+--------------+-----------+--------------+------------------+---------+---------+----------------+
| 2/56/1        | 63           | gw-c5eb2e | GW           | Check Point 9800 | R81.20  | JOINING | 0.0.0.0        |
+---------------+--------------+-----------+--------------+------------------+---------+---------+----------------+
 
0 Kudos
Lesley
Leader Leader
Leader
Monday
In response to Daniel_Hainich
Jump to solution

Lets check the down link towards the sgm fw with show maestro port x/x/x optic-info

also this sk is important for down link part

https://support.checkpoint.com/results/sk/sk158652

-------
If you like this post please give a thumbs up(kudo)! 🙂
0 Kudos
emmap
Employee
Employee
Monday
In response to Daniel_Hainich
Jump to solution

Looks like from the output there you are using the line card in slot 2 on the appliance. Please instead power down the appliances, remove whatever is in slot 1, move the line card you are using from slot 2 to slot 1, leave slot 2 empty, and see how it goes.

0 Kudos
Daniel_Hainich
Collaborator
yesterday
In response to emmap
Jump to solution

hi, we removed the shipped 10g/25g linecard and switched the 100g linecard to slot1. now it seems to be working.

0 Kudos
emmap
Employee
Employee
yesterday
In response to Daniel_Hainich
Jump to solution

Good to hear, as a best practice you should always remove unused line cards from SGMs. I believe we have blanking plates available to cover the gap there if you don't have any handy.

0 Kudos
Lesley
Leader Leader
Leader
Monday
Jump to solution

If you do the ping test do you see with tcpdump the traffic incoming on the destination device? Can you check if it does the correct IP is shown and no nat is done on accident? 

-------
If you like this post please give a thumbs up(kudo)! 🙂
0 Kudos
Daniel_Hainich
Collaborator
Monday
In response to Lesley
Jump to solution

on the CIN-Interface there is no traffic

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

View All ≫
 
Upcoming Maestro Events

    CheckMates Events