Hi Luke,
I used to have this problem ALL the times with Provider-1 MDS HA NG with AI
R55.
Even when I didn't do anything, the database is out of sync for no reason and
ended
up in collision mode.
Here is my advice for you. You will be better with just a single Management
Station. Just make sure you have good backup on it. If the management
server goes
down, your firewall still operates just fine, you just have to rebuild the
management
server and with good backup, you will be back online in no time. Now I have
NO
experience with NGx R60 High Availability Management Server but I can tell
you that
after spending 3 months testing Provider-1 Active/Standby CMA in R55 with
HFA_04,
I can tell you that it is a piece of crap. My CMAs, for no reason, just goes
into
collision mode and the machine is right next to each other so there was no
latencies
involved. Checkpoint may have improved it in NGx but I have never seen a
stable
HA Management Server environment. Go with a single Management Server, if you
can.
Now back to your issue, you may be better off open the tac case with
checkpoint.
There are some mannual steps you have to do to make it in sync again.
cisco4ng
"Marty, Lukas" <luke.marty AT NWA DOT COM> wrote:
Hello All!
I have a bit of an issue in my lab environment. I was testing a failed
upgrade scenario from r55 to r60. In a HA management station
environment, I upgraded one station, made a policy change on the
un-upgraded station, then performed the upgrade on it. Now, with both
stations at r60, I try to perform a sync and see the message "Database
Schema Addition Mismatch". My question is, is there any way to get the
databases back in synch? I have tried the obvious of switching the
stations roles between active/standby and trying the synch. I have also
dug around looking for info on performing a manual synch to no avail.
Any insight would be appreciated.
Thanks,
-Luke
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
