gateway ping and ssh issue

[peter_kimani]

Hello checkmates 

i migrated and changed over my system from r77.30 to r80.10 manager and upgraded two of my gateways from 4800 to 5800

i can be able to ping one of the two gateways from internal netwoks but cant ping the other 

i retained eth 7 to be sync , instead of using snc interface , could that be the issue

i cannot also ssh any of the two gateways

[Nüüül]

Hi,

can the gateways ping each other via the IP on sync interface? And can they ping each other via normal interface?

possible to ssh from one to another? are they already set up correctly? if yes, what are the cluster states?

Daniel

[peter_kimani]

yes they can, but cannot ping from internal network on to one gateway, bt can i can ping tgo one gateway

[AlekseiShelepov]

If you configured eth7 as sync interface in SmartDashboard, then it cannot be a problem.

Try to set fwha_forw_packet_to_not_active equal to 1 with command # fw ctl set int fwha_forw_packet_to_not_active 1, and if works, enable on permanent basis in fwkern.conf.

• Connection from one side of the ClusterXL destined to the physical IP address of a non-Active cluster member on the other side of the ClusterXL fails - sk42733 
• Changing the kernel global parameters for Check Point Security Gateway 

Here is some additional discussion on this:

Problem accessing standby cluster member from non-local network 

[peter_kimani]

Hello Aleksei,

 i have configured the firewall on on a load balancing  active active ( unicast) can it be affected or its on ha mode