Can not ping cluster IP address (Load-sharing unicast mode)

[minhhaivietnam]

Hello all,

I build a cluster R80.10 , running active/active load-sharing unicast mode.

From other devices(such router), I can ping all address: fw1(.178), fw2(179), cluster ip(177).

But when I am on FW1 or FW2, I can not ping cluster IP (still ping ip of each other)

This is log :

[FW1-PIVOT]# ping 10.128.252.177
PING 10.128.252.177 (10.128.252.177) 56(84) bytes of data.
From 10.128.252.178 icmp_seq=2 Destination Host Unreachable
From 10.128.252.178 icmp_seq=3 Destination Host Unreachable
From 10.128.252.178 icmp_seq=4 Destination Host Unreachable

[FW2]# ping 10.128.252.177
PING 10.128.252.177 (10.128.252.177) 56(84) bytes of data.

--- 10.128.252.177 ping statistics ---
22 packets transmitted, 0 received, 100% packet loss, time 20999ms

Here is capturing on FW2, it show no response found

Capture on FW1 : nothing found for icmp

Please anyone help to know why?

Thank you!

[PhoneBoy]

Reaching the cluster IPs from the gateways themselves doesn't seem all that relevant, especially if it's working from other connected machines.
Why is this relevant?

[minhhaivietnam]

Hello PhoneBoy,

Thank u.

So GW can not reach IP cluster is expected behavior or not? I read some article on internet about stanby GW can not ping cluster IP but not my situation. (mine is active/active load-sharing unicast).

My network is now operating normally so I am not so worried. Just want to know this is normal or something not right.

[PhoneBoy · Accepted solution]

This SK refers to HA, but it also applies to Load Sharing.
It's not supported.
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...