Hello,

I am experiencing an odd issue that I hope someone can help with. I've
searched through the list archives as well as Nokia's and Checkpoint's
support sites but found nothing which applies. The boxes in question are 2 x
Sun Ultra80s running Solaris 8, NG FP2 with ClusterXL installed in Load
Sharing Mode (based upon IPs). They have 2 x qfe cards installed with 5
interfaces currently in use. State synchronization is set up across the hme0
interfaces. Everything had been running splendiferously until one of my
colleagues recently disconnected one of the qfe interfaces as part of a
planned change. Once he did this, ClusterXL started reporting the problem
with the interface being down as expected. I went in and updated the
firewall and cluster objects to reflect the new configuration, and re-pushed
the policy. By this point, the interface had been unplumbed on the firewalls
and thus did not exist anywhere. Despite this, ClusterXL continues to report
the missing interface as being down. 'cphaprob -ia list' shows 'Interface
Active Check' as having a problem, and 'cphaprob -i if' still shows the
removed interface in the list (in a DOWN state). I also show one of the sync
interfaces as being down when I run 'cphaprob state', although so far as I
can tell, the boxes are still synchronizing state. When I first noticed
this, I tried restarting the HA on both of the boxes, but this did no good.
FWIW, the results are the same irrespective of which firewall I run the
commands on. Has anyone else seen this or have some suggestions as how to
proceed from here?

Many thanks for your time,
Patrick

_________________________________________________________________
Is your PC infected? Get a FREE online computer virus scan from McAfee�
Security. http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to