cpconfig
you need to turn it on
----- Original Message -----
From: "alberto nizzero" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, November 26, 2004 10:36 AM
Subject: Re: [FW-1] NOKIA Cluster Synchronization is not working
identical problem to me:
I've got 6 nokia cluster (not VRRP) ispo 3.7, checkpoint R54,
all of them with the same configuration, nokia clustering as 3rd party,
1 sync interface only for ipso (not in fw-1 topology), 1 sync interface
both for ipso and chekpoint (in checkpoint topology and secondary for ipso
clustering)
the problem: cpstat fw -f sync is fine on the first node, is running on
the second node
BUT: 0 sync packet in/out and sync in sync out are off
also checked cluster interface: on the 1st only ispo clustering packets,
on the 2nd both
clustering packages from fw-1 and ipso
also clusterxl running properly (status is ok but with problem on one
node due to sync)
any idea ?
Steve Johnson wrote:
> Do you have the cluster object defined with a sync network? Are you
> seeing the sync traffic on interfaces other than the interface you
> expect to see it on?
>
> also make sure you have clusterxl enabled on both members of the
> cluster. verify by simply running cpconfig on both cluster members.
>
> if the menu says, "Disable ClusterXL" then you know that it's
> configured to run.
>
> Also, make sure that in the 3rd party configuration section of the
> cluster object, that you specific Nokia VRRP and uncheck all 3 check
> boxes. Next make sure that you properly define all VIP ip addresses in
> the Cluster Object's Topology Section.
>
>
> -----Original Message-----
> From: Mailing list for discussion of Firewall-1 on behalf of Kim,
Cameron
> Sent: Thu 11/18/2004 6:52 PM
> To: [EMAIL PROTECTED]
> Cc:
> Subject: Re: [FW-1] Cluster Synchronization is not working
> 1st - Are you using ClusterXL or VRRP?
> 2nd - Are sync packets allowed in the ruleset on both firewalls? Check
> Smartview Tracker to see if you are dropping packets.
>
>
> Cameron Kim
> Mitsubishi Digital Electronics America
>
>
> -----Original Message-----
> From: Oliver [mailto:[EMAIL PROTECTED]
> Sent: Thursday, November 18, 2004 1:53 PM
> To: [EMAIL PROTECTED]
> Subject: [FW-1] Cluster Synchronization is not working
>
> Hi,
> The Cluster is formed by two nokias ipso3.8 with R55 for ipso3.8. When
> I use "fw ctl pstat" command the output is:
>
> FW1
>
> Sync:
> Version: new
> Status: Able to Send/Receive sync packets
> Sync packets sent:
> total : 34806028, retransmitted : 0, retrans reqs : 0, acks : 0
> Sync packets received:
> total : 0, were queued : 0, dropped by net :
> 0
> retrans reqs : 0, received 0 acks
> retrans reqs for illegal seq : 0
> dropped updates as a result of sync overload:
> 0
>
>
>
> FW2
>
> Sync:
> Version: new
> Status: Able to Send/Receive sync packets
> Sync packets sent:
> total : 36133457, retransmitted : 0, retrans reqs : 0, acks : 0
> Sync packets received:
> total : 0, were queued : 0, dropped by net :
> 0
> retrans reqs : 0, received 0 acks
> retrans reqs for illegal seq : 0
> dropped updates as a result of sync overload:
> 0
>
> Note that "Sync packets received: total: 0" is not normal. In
> SmartView Status everything is fine. I use tcpdump in the sync
> interface and I dont see anything, but there is connectivity in the
> sync interface (ping is done).
> Cpstop and cpstart dont fix the problem.
> Anybody can help?
> Thanks a lot
> Oliver
>
>
> _________________________________________________________
> Do You Yahoo!?
> Información de Estados Unidos y América Latina, en Yahoo! Noticias.
> Visítanos en http://noticias.espanol.yahoo.com
>
> =================================================
> To set vacation, Out-Of-Office, or away messages, send an email to
> [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your subscription options,
> email [EMAIL PROTECTED]
> =================================================
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
