- CheckMates
- :
- Products
- :
- Quantum
- :
- Security Gateways
- :
- Cluster member shows "disconnect" in SmartView Mon...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Cluster member shows "disconnect" in SmartView Monitor
Hi everyone !
I'm a new user.
Since the morning, I have a problem with one of my firewalls.
I have two firewalls (FW-1 and FW-2) which are in Cluster configuration and managed by two Smart-1 (Smart-1 PRI and Smart-1 SEC). When I go through SmartView Monitor FW-2 status is "disconnected".
What are the reasons and how could I solve the issue ?
Thanks !
- Tags:
- sk56202
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
OK; first of all: welcome Secondly, please move this message into Appliances and Gaia topics.
Then, you must use ClusterXL (I assume you used it in order to establishe the cluster between your two Security Gateways) commands to understand what is the status ans why there is an error.
Look at sk56202 How to troubleshoot failovers in ClusterXL and come again if you didn't find your answer.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Not sure users can move their own threads.
That said, I usually will move new threads as I see them.
However, if you want to be sure it happens, just tag me.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi everyone,
I have looked at sk56202 How to troubleshoot failovers in ClusterXL.
When I type cphaprob state command on FW-1, it shows "active attention" on FW-1 and "clusterXL inactive or machine is down" on FW-2. But when I type this command on FW-2 it shows "error : localhost is not a firewall-1 module ".
Let me mentioned that the two Security Gateways are in two remote Sites and in a same Cluster.
When I ping another machine from the faulty Security Gateway (FW-2), I get response. But pingfrom another machine to FW-2 doesn't work.
I also try to type cpconfig command and I got message error : cannot get CPDIR from the registy.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
"Localhost is not a FireWall-1 Module" and "cannot get CPDIR from the registry" points to much larger issues.
TAC may be able to assist here, but I suspect you'll have to rebuild FW-2.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I contacted TAC and it results that the database and most system files are corrupt. And as you said, FW-2 needs to be rebuilt.
Thank You for your help.
