management HA - cpmistat

[Luis_Miguel_Mig]

I am a bit confused about the output of "cpmistat -r mg <standby mgmt>"
It used to be okay in R77.20. However in R81.10, this is the scenario:

According to smartconsole my managers are in sync and I can see the last time the successfully sync'ed
The output of mgmt_cli show ha-status also shows us the status is okay and they are in sync

I can see that /opt/CPsuite-R81.10/fw1/state/<cluster>/FW1/local.set is synced in both managers.

However the output of "cpmistat -r mg <standby mgmt>" shows me:

application_open_events: false
mgSyncStatus: "Unknown"
mgStatusOK: 0
mgStatusDescription: "Not synchronized"
application_error_description: ""


Any idea why?

[the_rock]

I remember having that issue in the lab once and was fine after I rebooted the standby server.

Andy

[Tal_Paz-Fridman · Accepted solution]

In R81.10 CLI Reference Guide I do not see this command as supported (it's a very old command using CPMI).

https://downloads.checkpoint.com/fileserver/SOURCE/direct/ID/115904/FILE/CP_R81.10_CLI_ReferenceGuid...

The Management API commands are the ones you should rely on.

[Luis_Miguel_Mig]

I have rebooted the standby but it doesn't resolve it. I made the assumption that it was supported in R81.10 because this sk article says all versions but yeah that may be it, it may not be supported any more.

https://support.checkpoint.com/results/sk/sk31793

[the_rock]

You are right, but since @Tal_Paz-Fridman is CP employee, he would know, for sure.

Andy

[Sergei_Shir]

In addition, refer to https://sc1.checkpoint.com/documents/Jumbo_HFA/R81/R81.00/Take_51.htm

ID	Product	Description
Take 51 Released on 29 December 2021
PRJ-21788, PRHF-15257	Security Management	In some scenarios, the output of the "cpmistat" command may contain partial information.