Hi, So I figured this out. Its supposed to be like this it seems.
The secondary gateway didnt forward packets when I did a VRRP failover in XOS, but when I started upgrading primary node it did. So XOS and CP seems to work in a different way regarding this. Regards, Torkel > -----Original Message----- > From: Mailing list for discussion of Firewall-1 [mailto:FW-1- > [EMAIL PROTECTED] On Behalf Of Torkel Mathisen > Sent: Friday, October 24, 2008 10:03 AM > To: [email protected] > Subject: Re: [FW-1] Failover problem when upgrading FW-1 R65 on > Crossbeam > > > > I guess some of you run Checkpoint R65 on Crossbeam. > > > > > > I got a problem when I tried to upgrade it from R65 HFA02 to R65 > > HFA30. > > > > > > The installation of HFA30 itself worked perfectly, but after i > > rebooted I > > > got this: > > > > > > root$ cphaprob state > > > > > > Cluster Mode: Sync only (OPSEC)) > > > > > > Number Unique Address Firewall State (*) > > > > > > 2 (local) 192.168.xxx.xxx Down (during cluster upgrade) > > > > > > When I tried to fail over the cluster, so I could upgrade my > primary > > > gateway, the secondary gateway doesn't forward traffic. > > > > > > > Have you got the cluster control protocol in broadcast mode? > > Yes. > > Regars, > Torkel > > Scanned by Check Point Total Security Gateway. > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
