Firewall-1

Re: [FW-1] Cluster Synchronization is not working

Subject: Re: [FW-1] Cluster Synchronization is not working
From: "Kim, Cameron" <CKim AT MDEA DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Thu, 18 Nov 2004 15:52:55 -0800
1st - Are you using ClusterXL or VRRP?
2nd - Are sync packets allowed in the ruleset on both firewalls? Check 
Smartview Tracker to see if you are dropping packets.


Cameron Kim
Mitsubishi Digital Electronics America


-----Original Message-----
From: Oliver [mailto:oliver_dog2201 AT YAHOO DOT COM]
Sent: Thursday, November 18, 2004 1:53 PM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1] Cluster Synchronization is not working

Hi,
The Cluster is formed by two nokias ipso3.8 with R55 for ipso3.8. When I use 
"fw ctl pstat" command the output is:

FW1

Sync:
        Version: new
        Status: Able to Send/Receive sync packets
        Sync packets sent:
         total : 34806028,  retransmitted : 0, retrans reqs : 0,  acks : 0
        Sync packets received:
         total : 0,  were queued : 0, dropped by net :
0
         retrans reqs : 0, received 0 acks
         retrans reqs for illegal seq : 0
         dropped updates as a result of sync overload:
0



FW2

Sync:
        Version: new
        Status: Able to Send/Receive sync packets
        Sync packets sent:
         total : 36133457,  retransmitted : 0, retrans reqs : 0,  acks : 0
        Sync packets received:
         total : 0,  were queued : 0, dropped by net :
0
         retrans reqs : 0, received 0 acks
         retrans reqs for illegal seq : 0
         dropped updates as a result of sync overload:
0

Note that "Sync packets received: total: 0" is not normal. In SmartView Status 
everything is fine. I use tcpdump in the sync interface and I dont see 
anything, but there is connectivity in the sync interface (ping is done).
Cpstop and cpstart dont fix the problem.
Anybody can help?
Thanks a lot
Oliver


_________________________________________________________
Do You Yahoo!?
Información de Estados Unidos y América Latina, en Yahoo! Noticias.
Visítanos en http://noticias.espanol.yahoo.com

=================================================
To set vacation, Out-Of-Office, or away messages, send an email to LISTSERV AT 
amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your subscription options, email 
fw-1-owner AT ts.checkpoint DOT com 
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>