Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
praveshnayal
Explorer

Cluster XL gateway states

If the cluster link goes down in case of active/standby deployment.

1)What will be the states of each gateway in cphaprob stat?

2) Also if there is another link connected between the firewalls via switch either (LAN to LAN or WAN to WAN) ;

will CCP be sent between the firewalls from the LAN to LAN /WAN to WAN side connected links on the switch.

 

 

0 Kudos
Reply
3 Replies
Timothy_Hall
Champion
Champion

When you say "cluster link" I assume you mean the sync network between the cluster members.  If that link is unplugged the State Sync pnote will fail indicating an impairment on both members.  Assuming the members can still see each other's CCP traffic through at least one other clustered interface, the members will not split-brain in this case and whichever firewall was Active will continue to pass traffic but in Active Attention (!) mode.  I think the standby member will show a Down state, but will immediately go Active Attention (!) if something happens to the currently-active member.  This all assumes that the cluster was in a proper Active/Standby state to begin with and there are no other pnote failures.

"Max Capture: Know Your Packets" Video Series
now available at http://www.maxpowerfirewalls.com
praveshnayal
Explorer

Thanks for the brief explanation Timothy. Is there any specific SK for such type of cluster XL states query.

0 Kudos
Reply
Martin_Raska
Advisor

Search for CLusterXL admin guide or ClusterXL cheat sheet in this forum.

0 Kudos
Reply