daniel,
don't use nokia-HA-state, use OPSEC ... then define a dedicated state-sync network.
reboot both nodes, check status-viewer that HA works fine, and test again.
cheers
reinhard
-----UrsprÃngliche Nachricht-----
Von: Daniel Samaan [mailto:[EMAIL PROTECTED]
Gesendet: Di 18.11.2003 01:38
An: [EMAIL PROTECTED]
Cc:
Betreff: [FW-1] NG AI StateSync is not working
I have 2 brand new 530's with IPSO 3.7 Build29. I have NG AI R54
installed.
Stateful failover is not working. When I unload the policy and turn on
IPSO forwarding it works fine, thus I know my VRRP config is correct.
Nokia is configured for Legacy VRRP. Cluster object is set for Nokia VRRP
(Under 3rd Party Configuration). Synchronization network is set. Topology
for sync interface on both cluster member objects has Cluster Interface
unchecked for that network. Sync network is connected with a cross-over
cable.
When I pull the cable to simulate a FO, the LogViewer states reports "State
change of Cluster Member1 from active to down was cancelled. since all
other cluster members are down. Member remains active".
SystemStatus is reporting CLusterXL on FW2 has a Problem. It's Started, but
Down.
CPHASTAT for FW2 -
Product name: High Availability
Version: NG with Application Intelligence
Status: Problem
HA installed: 1
Working mode: Sync only (IPSO cluster)
HA started: yes
What am I missing here?
Cell: (847) 274-2034
[EMAIL PROTECTED]
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
