Firewall-1

[FW-1] Secondary Keeps Reporting Primary Down in ClusterXL

Subject: [FW-1] Secondary Keeps Reporting Primary Down in ClusterXL
From: Crist Clark <Crist.Clark AT GLOBALSTAR DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Fri, 26 Jan 2007 14:09:49 -0800
I've got two ClusterXL pairs managed from a single
SmartCenter. One of the pairs is causing me some pain.
Looking at "Control" messages in the logs, I see the
secondary firewall (gcc1fw2) claiming that the member 1
is down, so it comes up, then it goes back to standby.
I presume, although it doesn't log it, it goes back to
standby when it realizes that member 1 is still up.

Notice that member 1 is never claiming to be down. Nor
does it claim that member 2 has disappeared. Just member 2
does this. My other cluster, which is almost identical,
doesn't display this behavior.

Anyone have some suggestions for how to debug this? I've
checked the obvious, that the link between two (crossover
cable) is set to the correct duplex on both ends and other
link-layer problems. We really haven't noticed this
situation create any performance or connectivity issues,
but I need to clear this up so I can get only real failure
notifications into our NMS.

"Date" "Time" "Product" "Origin" "Type" "Information"
"22Jan2007" "8:23:45" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: 
(ClusterXL) member 1 (10.220.216.109) is down."
"22Jan2007" "8:23:45" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: 
(ClusterXL) member 2 (10.220.216.110) is active."
"22Jan2007" "8:23:45" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: 
(ClusterXL) member 2 (10.220.216.110) is standby."
"22Jan2007" "9:29:02" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: 
(ClusterXL) member 1 (10.220.216.109) is down."
"22Jan2007" "9:29:02" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: 
(ClusterXL) member 2 (10.220.216.110) is active."
"22Jan2007" "9:29:02" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: 
(ClusterXL) member 2 (10.220.216.110) is standby."
"22Jan2007" "9:44:32" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: 
(ClusterXL) member 1 (10.220.216.109) is down."
"22Jan2007" "9:44:33" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: 
(ClusterXL) member 2 (10.220.216.110) is active."
"22Jan2007" "9:44:33" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: 
(ClusterXL) member 2 (10.220.216.110) is standby."
"22Jan2007" "10:11:44" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: 
(ClusterXL) member 1 (10.220.216.109) is down."
"22Jan2007" "10:11:44" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: 
(ClusterXL) member 2 (10.220.216.110) is active."
"22Jan2007" "10:11:44" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: 
(ClusterXL) member 2 (10.220.216.110) is standby."
"22Jan2007" "10:25:00" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: 
(ClusterXL) member 1 (10.220.216.109) is down."
"22Jan2007" "10:25:00" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: 
(ClusterXL) member 2 (10.220.216.110) is active."
"22Jan2007" "10:25:00" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: 
(ClusterXL) member 2 (10.220.216.110) is standby."
"22Jan2007" "10:44:37" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: 
(ClusterXL) member 1 (10.220.216.109) is down."
"22Jan2007" "10:44:38" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: 
(ClusterXL) member 2 (10.220.216.110) is active."
"22Jan2007" "10:44:38" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: 
(ClusterXL) member 2 (10.220.216.110) is standby."
"22Jan2007" "11:29:56" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: 
(ClusterXL) member 1 (10.220.216.109) is down."
"22Jan2007" "11:29:57" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: 
(ClusterXL) member 2 (10.220.216.110) is active."
"22Jan2007" "11:29:57" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: 
(ClusterXL) member 2 (10.220.216.110) is standby."
"22Jan2007" "12:05:37" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: 
(ClusterXL) member 1 (10.220.216.109) is down."
"22Jan2007" "12:05:37" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: 
(ClusterXL) member 2 (10.220.216.110) is active."
"22Jan2007" "12:05:37" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: 
(ClusterXL) member 2 (10.220.216.110) is standby."
"22Jan2007" "12:44:36" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: 
(ClusterXL) member 1 (10.220.216.109) is down."
"22Jan2007" "12:44:36" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: 
(ClusterXL) member 2 (10.220.216.110) is active."
"22Jan2007" "12:44:36" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: 
(ClusterXL) member 2 (10.220.216.110) is standby."

-- 

Crist J. Clark                               crist.clark AT globalstar DOT com
Globalstar Communications                                (408) 933-4387


B¼information contained in this e-mail message is confidential, intended only 
for the use of the individual or entity named above. If the reader of this 
e-mail is not the intended recipient, or the employee or agent responsible to 
deliver it to the intended recipient, you are hereby notified that any review, 
dissemination, distribution or copying of this communication is strictly 
prohibited. If you have received this e-mail in error, please contact 
postmaster AT globalstar DOT com 

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>