AI Security Masters E7:
How CPR Broke ChatGPT's Isolation and What It Means for You
Blueprint Architecture for Securing
The AI Factory & AI Data Center
Call For Papers
Your Expertise. Our Stage
Good, Better, Best:
Prioritizing Defenses Against Credential Abuse
Ink Dragon: A Major Nation-State Campaign
Watch HereCheckMates Go:
CheckMates Fest
Dear all,
im facing a issue HA cluster is failover secondary device without any changes but i see "cphaprob state" ate primary device as below. It is saying "Incorrect configuration - Local cluster member has fewer cluster interfaces configured compared to other cluster member(s)".
Actually, no interfaces were down. all are up state. but checkpoint is knowing these interfaces are down state. So, ha is failover to secondary.
Anyone experienced it?
Thanks much.
Did it ever work ?
sure, it works previously.
Do you have "cphaprob -a if" output from the time of the issue or equivalent logs/messages?
On the interfaces reporting as down, what do you see if monitoring with tcpdump or similar?
On those specific VLANs is there much traffic and many hosts to begin with?
actually, my topology is like this. all respective vlan have at switch, all is up like fw02. But fw01 is knowing interface down state. i have no idea, what's wrong with it. How should i check it, pls kindly suggest it. thanks.
actually, my topology is like this. all respective vlan have at switch, all is up like fw02. But fw01 is knowing interface down state. i have no idea, what's wrong with it. How should i check it, pls kindly suggest it. thanks.
actually, my topology is like this. all respective vlan have at switch, all is up like fw02. But fw01 is knowing interface down state. i have no idea, what's wrong with it. How should i check it, pls kindly suggest it. thanks.
Chris_Atkinson
Chris_Atkinson
Chris_Atkinson
If you change / remove the host filter do you see anything other than unanswered ARP requests?
If you change / remove the host filter do you see anything other than unanswered ARP requests?
If you change / remove the host filter do you see anything other than unanswered ARP requests?
Chris_Atkinson
Chris_Atkinson
Chris_Atkinson
To clarify if you perform "arp -a | grep 10.20.30." what do you see?
To clarify if you perform "arp -a | grep 10.20.30." what do you see?
To clarify if you perform "arp -a | grep 10.20.30." what do you see?
