hi,

do you have the connection between the 2 nokias on the sync-interface? can you ping the other box?
if the connection 100Mbit/full-duplex?

are the 2 firewall-modules up and running "cpstat fw"?

try to run "cphastart" and check if clusterXL is enabled in "cpconfig".

br
reinhard

At 11:02 28.12.2007, you wrote:
Hello Gurus,

I have a VRRP cluster with two IP740s with IPSO 4.1_build013. I'm here in the middle of a strange troubleshooting session. Here are the details:

The sync is not working fine. cphaprob state gives the following output.

fw1[admin]# cphaprob state

Cluster Mode:   Sync only (IPSO cluster))

Number     Unique Address  Firewall State (*)

1          10.40.254.165   active
2 (local)  10.40.254.166   down

I tried to unregister and re-register devices from cphaprob list, but it didn't help. I also have rebooted the problematic cluster member.

fw ctl pstat gives the following message.

Sync:
        Version: new
        Status:
         Unable to send sync packets
         Unable to receive sync packets

fwd.elg file is filled up with the following message:

fwsyncn_connected: connection to 10.40.254.165 failed. error=-5

Any ideas anyone?

Wishing You very happy New Year!

-lari-


Lari Luoma
Senior Network Security Specialist
Mainframe Consulting Oy
[EMAIL PROTECTED]
+358-45-6576820
www.mainframe.fi


=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

--
Reinhard Stich          [EMAIL PROTECTED]
Internet Security AG,      1150 Wien, Johnstrasse 29
Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333

Scanned by Check Point Total Security Gateway.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to