>>> On 3/24/2009 at 11:51 AM, "M. N." <[email protected]> wrote:
[snip]

> Upon closer inspection of /var/log/messages on both machines, I noticed the
> following error message: ""CPHA: Found another machine with same cluster
> ID...""
> 
>  
> 
> SK#i3780 indicates that this is due to the fact that two distinct clusters
> (with same cluster ID) are present on the same switch/router/telecom
> equipment and the solution is to change the cluster ID of one of 2 clusters
> to something distinct.
> 
>  
> 
> Now I'm not even why Check Point is detecting A and B as two distinct
> clusters instead of two members of the SAME cluster. I have a ticket opened
> with Check Point but wanted to see if the community had any inputs.

I had this problem when installing a new cluster a while back. I
believe the issue came from cloning machines. You really don't
have two clusters. You just have two cluster members with the same
member number. I'm guessing they both think that they are member
number 1.

Now... I wish I could remember how I changed the member number on
one of them. Did I just switch up the order in the cluster object
and just reinstall the policy? That may have been it.

Also, to knock one of them off-line, don't do the unloadlocal
and cpstop, just do a "cphastop." That will knock it out of
the cluster, but you will still have the Check Point daemons
running to install policies.


Scanned by Check Point Total Security Gateway.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

Reply via email to