- CheckMates
- :
- Products
- :
- Quantum
- :
- Security Gateways
- :
- Re: Cluster XL gateway states
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Cluster XL gateway states
If the cluster link goes down in case of active/standby deployment.
1)What will be the states of each gateway in cphaprob stat?
2) Also if there is another link connected between the firewalls via switch either (LAN to LAN or WAN to WAN) ;
will CCP be sent between the firewalls from the LAN to LAN /WAN to WAN side connected links on the switch.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
When you say "cluster link" I assume you mean the sync network between the cluster members. If that link is unplugged the State Sync pnote will fail indicating an impairment on both members. Assuming the members can still see each other's CCP traffic through at least one other clustered interface, the members will not split-brain in this case and whichever firewall was Active will continue to pass traffic but in Active Attention (!) mode. I think the standby member will show a Down state, but will immediately go Active Attention (!) if something happens to the currently-active member. This all assumes that the cluster was in a proper Active/Standby state to begin with and there are no other pnote failures.
Exclusively at CPX 2025 Las Vegas Tuesday Feb 25th @ 1:00pm
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks for the brief explanation Timothy. Is there any specific SK for such type of cluster XL states query.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Search for CLusterXL admin guide or ClusterXL cheat sheet in this forum.
![](/skins/images/84DAB6BD358ECB13CE1094473F6E2961/responsive_peak/images/icon_anonymous_message.png)