Hi all, I have a problem with a couple of firewall in High Availability with ClusterXL. I have two SunFire 280 with O.S. Solaris 8 and Firewall-1 NG R55 AI with ClusterXL configured in High Availability Legacy Mode. The cluster has been ok for two months, but since two weeks ago problems have been starting. Two or three times at day, the primary server detects a problem and switches to the secondary, that also detects a problem and switches again to the other (it doesn't happen on Saturday or Sunday when the traffic's level is very low). The messages in the Log Viewer are:
cluster_info: (ClusterXL) Problem notification on member 1 detected a problem (cphad) cluster_info: (ClusterXL) Problem notification on member 1 status OK (cphad) cluster_info: (ClusterXL) member 1 is up cluster_info: (ClusterXL) member 1 is standby cluster_info: (ClusterXL) member 1 is down cluster_info: (ClusterXL) member 2 is active cluster_info: (ClusterXL) Problem notification on member 2 detected a problem (fwd) cluster_info: (ClusterXL) Problem notification on member 2 status OK (fwd) cluster_info: (ClusterXL) member 2 is up cluster_info: (ClusterXL) member 2 is standby cluster_info: (ClusterXL) member 2 is down cluster_info: (ClusterXL) member 1 is active On the system I collect data every 10 min. about the connections (fw tab), state of memory and cpu and n� of packets per interface with input and output errors. I have seen that in correspondence of the problem there are about 5000 input errors on the qfe1 interface (there are 1 interface on board eri0 and 1 quadfast qfe). The qfe1 interface is connected (not directly) to a Cisco WS-C5500 (previously I have tried to force the interface to 100 full duplex on the firewall and on the switch, but seems that the servers and the switch don't understand each other and I come back to auto-negotiation). What else can I do to understand what is happening?? Any idea?? Thanks in advance. Rosa ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
