Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
prakash7
Contributor

Traffic was dropped in LAN interface of 300 appliance manageb by smart-1 cloud

Have a cluster setup with diffrent subnet Ipconfiguration in checkpoint 300 appliance primary WAN interface(Ipsubnet /30)

Example of Cluster IP Addresses on Different Subnets

When we are tring to connect internet we face discoinnection randomly and got the below error

packet proto=6 10.x.x.34:443 -> 10.x.x.1:62322 dropped by fwmultik_process_f2p_cookie_inner Reason: PSL drop: TLS_PAKER
packet proto=6 10.x.x.34:443 -> 10.x.x.1:62322 dropped by fwmultik_process_f2p_cookie_inner Reason: PSL drop: TLS_PAKER
packet proto=6 10.x.x.34:443 -> 10.x.x.1:62322 dropped by fwmultik_process_f2p_cookie_inner Reason: PSL drop: TLS_PAKER
packet proto=6 10.x.x.34:443 -> 10.x.x.1:62322 dropped by fwmultik_process_f2p_cookie_inner Reason: PSL drop: TLS_PAKER

But secondary ill was working fine with /29 subnet.

Prakash D

0 Kudos
5 Replies
G_W_Albrecht
Legend Legend
Legend

Sorry, but a 300 appliance ??? R8 – Fujitsu RX 300 S8 appliance went out of support 2020...

CCSP - CCSE / CCTE / CTPS / CCME / CCSM Elite / SMB Specialist
0 Kudos
prakash7
Contributor

sorry for the wrong information its 3000 appliance with R81.10 take 170 hotfix

 

0 Kudos
Chris_Atkinson
Employee Employee
Employee

Is this a 3X00 series, which major version & Jumbo?

Do all the necessary routes exist per the documentation and how is the NAT configured via policy or tick box option on the gateway object?

 

CCSM R77/R80/ELITE
0 Kudos
prakash7
Contributor

everything is exist able to reach peer radius server from gateway

0 Kudos
G_W_Albrecht
Legend Legend
Legend

Open a SR# with CP TAC to get this resolved asap!

CCSP - CCSE / CCTE / CTPS / CCME / CCSM Elite / SMB Specialist
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events