Richard Scott

ClusterXL - standby cannot reach gateway

Discussion created by Richard Scott on Sep 10, 2018
Latest reply on Sep 13, 2018 by Günther W. Albrecht

I've got a R77.30 cluster of two nodes (running on vmware). 

 

The active node can ping the default gateway and onward to the rest of the network without any issue. 

 

However, the standby node can't even ping the gateway, let alone anything beyond it. If I unload the policy from the node, then it is able ping it.

Logs suggest the traffic is being nat'd to the cluster's address. The gateway can ping active, standby and cluster addresses.

 

I've tried  fw ctl set int fwha_forw_packet_to_not_active 1 on both nodes, but that didn't help.

 

 The management interface is reachable via a different gateway (and static route).

Any suggestions greatly appreciated!

Outcomes