Thought I'd report on how this got resolved. Thinking about it more, I remembered that cluster members don't just chat over the sync link. There is also lots of talk on all of the cluster interfaces too. I went through and reviewed all of the other interfaces.
Turns out, we had a duplex mismatch from a recent switch upgrade. The new switch was set to autonegotiate (the default), but the firewalls were forced to 100 MB/full duplex (which matched the old switch). This will result in the switch going to 100/half and the firewall doing 100/full. We changed the firewalls to auto, and now that the links are both 1 GB/full, the problem has gone away. On 1/26/2007 at 2:09 PM, Crist Clark <[EMAIL PROTECTED]> wrote: > I've got two ClusterXL pairs managed from a single > SmartCenter. One of the pairs is causing me some pain. > Looking at "Control" messages in the logs, I see the > secondary firewall (gcc1fw2) claiming that the member 1 > is down, so it comes up, then it goes back to standby. > I presume, although it doesn't log it, it goes back to > standby when it realizes that member 1 is still up. > > Notice that member 1 is never claiming to be down. Nor > does it claim that member 2 has disappeared. Just member 2 > does this. My other cluster, which is almost identical, > doesn't display this behavior. > > Anyone have some suggestions for how to debug this? I've > checked the obvious, that the link between two (crossover > cable) is set to the correct duplex on both ends and other > link-layer problems. We really haven't noticed this > situation create any performance or connectivity issues, > but I need to clear this up so I can get only real failure > notifications into our NMS. > > "Date" "Time" "Product" "Origin" "Type" "Information" > "22Jan2007" "8:23:45" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: > (ClusterXL) member 1 (10.220.216.109) is down." > "22Jan2007" "8:23:45" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: > (ClusterXL) member 2 (10.220.216.110) is active." > "22Jan2007" "8:23:45" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: > (ClusterXL) member 2 (10.220.216.110) is standby." > "22Jan2007" "9:29:02" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: > (ClusterXL) member 1 (10.220.216.109) is down." > "22Jan2007" "9:29:02" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: > (ClusterXL) member 2 (10.220.216.110) is active." > "22Jan2007" "9:29:02" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: > (ClusterXL) member 2 (10.220.216.110) is standby." > "22Jan2007" "9:44:32" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: > (ClusterXL) member 1 (10.220.216.109) is down." > "22Jan2007" "9:44:33" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: > (ClusterXL) member 2 (10.220.216.110) is active." > "22Jan2007" "9:44:33" "VPN-1 Pro/Express" "gcc1fw2" "Control" "cluster_info: > (ClusterXL) member 2 (10.220.216.110) is standby." > "22Jan2007" "10:11:44" "VPN-1 Pro/Express" "gcc1fw2" "Control" > "cluster_info: (ClusterXL) member 1 (10.220.216.109) is down." > "22Jan2007" "10:11:44" "VPN-1 Pro/Express" "gcc1fw2" "Control" > "cluster_info: (ClusterXL) member 2 (10.220.216.110) is active." > "22Jan2007" "10:11:44" "VPN-1 Pro/Express" "gcc1fw2" "Control" > "cluster_info: (ClusterXL) member 2 (10.220.216.110) is standby." > "22Jan2007" "10:25:00" "VPN-1 Pro/Express" "gcc1fw2" "Control" > "cluster_info: (ClusterXL) member 1 (10.220.216.109) is down." > "22Jan2007" "10:25:00" "VPN-1 Pro/Express" "gcc1fw2" "Control" > "cluster_info: (ClusterXL) member 2 (10.220.216.110) is active." > "22Jan2007" "10:25:00" "VPN-1 Pro/Express" "gcc1fw2" "Control" > "cluster_info: (ClusterXL) member 2 (10.220.216.110) is standby." > "22Jan2007" "10:44:37" "VPN-1 Pro/Express" "gcc1fw2" "Control" > "cluster_info: (ClusterXL) member 1 (10.220.216.109) is down." > "22Jan2007" "10:44:38" "VPN-1 Pro/Express" "gcc1fw2" "Control" > "cluster_info: (ClusterXL) member 2 (10.220.216.110) is active." > "22Jan2007" "10:44:38" "VPN-1 Pro/Express" "gcc1fw2" "Control" > "cluster_info: (ClusterXL) member 2 (10.220.216.110) is standby." > "22Jan2007" "11:29:56" "VPN-1 Pro/Express" "gcc1fw2" "Control" > "cluster_info: (ClusterXL) member 1 (10.220.216.109) is down." > "22Jan2007" "11:29:57" "VPN-1 Pro/Express" "gcc1fw2" "Control" > "cluster_info: (ClusterXL) member 2 (10.220.216.110) is active." > "22Jan2007" "11:29:57" "VPN-1 Pro/Express" "gcc1fw2" "Control" > "cluster_info: (ClusterXL) member 2 (10.220.216.110) is standby." > "22Jan2007" "12:05:37" "VPN-1 Pro/Express" "gcc1fw2" "Control" > "cluster_info: (ClusterXL) member 1 (10.220.216.109) is down." > "22Jan2007" "12:05:37" "VPN-1 Pro/Express" "gcc1fw2" "Control" > "cluster_info: (ClusterXL) member 2 (10.220.216.110) is active." > "22Jan2007" "12:05:37" "VPN-1 Pro/Express" "gcc1fw2" "Control" > "cluster_info: (ClusterXL) member 2 (10.220.216.110) is standby." > "22Jan2007" "12:44:36" "VPN-1 Pro/Express" "gcc1fw2" "Control" > "cluster_info: (ClusterXL) member 1 (10.220.216.109) is down." > "22Jan2007" "12:44:36" "VPN-1 Pro/Express" "gcc1fw2" "Control" > "cluster_info: (ClusterXL) member 2 (10.220.216.110) is active." > "22Jan2007" "12:44:36" "VPN-1 Pro/Express" "gcc1fw2" "Control" > "cluster_info: (ClusterXL) member 2 (10.220.216.110) is standby." B¼information contained in this e-mail message is confidential, intended only for the use of the individual or entity named above. If the reader of this e-mail is not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any review, dissemination, distribution or copying of this communication is strictly prohibited. If you have received this e-mail in error, please contact [EMAIL PROTECTED] ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
