I had a similar problem with R65 in HA (not active/active), but following sk32488 fixed it for me. I am not sure if this would be a valid fix for active/active.
Good luck -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of cisco4ng Sent: Tuesday, 9 October 2007 9:40 a.m. To: [email protected] Subject: [FW-1] getting these messages whenever policy is pushed Has anyone seen this before? I have a pair of clusterXL Active/Active R55 with HFA_20. Everytime we push policy to the gateways, I see this message: Oct 5 19:13:42 logger logger: 19:10:09 ctl 192.168.250.18 >daemon product: VPN-1 & FireWall-1; cluster_info: (ClusterXL) member 2 (192.0.2.2) is up.; Oct 5 19:13:42 logger logger: 19:10:09 ctl 192.168.250.18 >daemon product: VPN-1 & FireWall-1; cluster_info: (ClusterXL) Starting ClusterXL.; Oct 5 19:13:42 logger logger: 19:10:14 ctl 192.168.250.18 >daemon product: VPN-1 & FireWall-1; cluster_info: (ClusterXL) member 2 (192.0.2.2) is active.; Oct 5 19:13:42 logger logger: 19:10:09 ctl 192.168.250.18 >daemon product: VPN-1 & FireWall-1; cluster_info: (ClusterXL) Stopping ClusterXL.; Oct 5 19:13:42 logger logger: 19:10:09 ctl 192.168.250.18 >daemon product: VPN-1 & FireWall-1; cluster_info: (ClusterXL) member 2 (192.0.2.2) is initializing.; Oct 5 19:13:42 logger logger: 19:10:09 ctl 192.168.250.18 >daemon product: VPN-1 & FireWall-1; cluster_info: (ClusterXL) interface eth9 of member 2 (192.0.2.2) is down (receive down, transmit down); Oct 5 19:13:42 logger logger: 19:10:09 ctl 192.168.250.18 >daemon product: VPN-1 & FireWall-1; cluster_info: (ClusterXL) interface eth7 of member 2 (192.0.2.2) is down (receive down, transmit down); we disable igmp on the switches. the switches are good, I verified them. I also implemented checkpoint sk30060 (what to do with inactive or disconnected interfaces on cluster member(s)) but the problem is not going away. How do you go about fixing this issue? Thanks. --------------------------------- Be a better Heartthrob. Get better relationship answers from someone who knows. Yahoo! Answers - Check it out. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
