Size: a a a

Check Point Community (RUS)

2021 May 20

AK

Alexander Kononov in Check Point Community (RUS)
Добрый вечер. Попробовал на Standby удалить триал лицензию, в общем после ребута standby нода clusterxl - DOWN(
источник

IA

Ilia Anokhin in Check Point Community (RUS)
Ну не грустите вы сразу :) Что в cphaprob list?
источник

AK

Alexander Kononov in Check Point Community (RUS)
Да я не грущу)
источник

AK

Alexander Kononov in Check Point Community (RUS)
[Expert@msk3mod:0]# cphaprob state

Cluster Mode:   High Availability (Active Up) with IGMP Membership
ID         Unique Address  Assigned Load   State          Name
3 (local)  172.16.1.3      0%              DOWN           msk3mod
4          172.16.1.4      100%            ACTIVE(!)      msk4mod
Active PNOTEs: COREXL
Last member state change event:
  Event Code:                 CLUS-113900
  State change:               INIT -> DOWN
  Reason for state change:    Mismatch in the number of CoreXL FW instances has been detected
  Event time:                 Thu May 20 21:16:25 2021
Last cluster failover event:
  Transition to new ACTIVE:   Member 3 -> Member 4
  Reason:                     Reboot
  Event time:                 Tue Apr 27 00:20:59 2021
Cluster failover count:
  Failover counter:           1
  Time of counter reset:      Mon Apr 26 13:28:40 2021 (reboot)
источник

AK

Alexander Kononov in Check Point Community (RUS)
Ща проверю coreXL
источник

IA

Ilia Anokhin in Check Point Community (RUS)
А на второй и настройки воркеров?
источник

AK

Alexander Kononov in Check Point Community (RUS)
fw ctl affinity -l?
источник

AK

Alexander Kononov in Check Point Community (RUS)
По воркерам достаточно будет?
источник

AK

Alexander Kononov in Check Point Community (RUS)
Это с другой ноды
источник

AK

Alexander Kononov in Check Point Community (RUS)
msk4mod> show cluster state

Cluster Mode:   High Availability (Active Up) with IGMP Membership
ID         Unique Address  Assigned Load   State          Name
3          172.16.1.3      0%              DOWN           msk3mod
4 (local)  172.16.1.4      100%            ACTIVE(!)      msk4mod
Active PNOTEs: COREXL
Last member state change event:
  Event Code:                 CLUS-113905
  State change:               ACTIVE -> ACTIVE(!)
  Reason for state change:    Mismatch in the number of CoreXL FW instances has been detected
  Event time:                 Thu May 20 21:16:25 2021
Last cluster failover event:
  Transition to new ACTIVE:   Member 3 -> Member 4
  Reason:                     Available on member 3
  Event time:                 Tue Apr 27 00:20:59 2021
Cluster failover count:
  Failover counter:           1
  Time of counter reset:      Mon Apr 26 13:28:40 2021 (reboot)
источник

IA

Ilia Anokhin in Check Point Community (RUS)
-l -v - r
источник

AK

Alexander Kononov in Check Point Community (RUS)
[Expert@msk4mod:0]# fw ctl affinity -l -v -r
CPU 0:  eth0 (irq 135) eth1 (irq 150) eth2 (irq 140) eth3 (irq 145)
CPU 1:
CPU 2:  fw_9
       mpdaemon fwd lpd dtlsd rtmd in.asessiond dtpsd fwpushd in.acapd vpnd in.ahclientd cprid cpd
CPU 3:  fw_8
       mpdaemon fwd lpd dtlsd rtmd in.asessiond dtpsd fwpushd in.acapd vpnd in.ahclientd cprid cpd
CPU 4:  fw_7
       mpdaemon fwd lpd dtlsd rtmd in.asessiond dtpsd fwpushd in.acapd vpnd in.ahclientd cprid cpd
CPU 5:  fw_6
       mpdaemon fwd lpd dtlsd rtmd in.asessiond dtpsd fwpushd in.acapd vpnd in.ahclientd cprid cpd
CPU 6:  fw_5
       mpdaemon fwd lpd dtlsd rtmd in.asessiond dtpsd fwpushd in.acapd vpnd in.ahclientd cprid cpd
CPU 7:  fw_4
       mpdaemon fwd lpd dtlsd rtmd in.asessiond dtpsd fwpushd in.acapd vpnd in.ahclientd cprid cpd
CPU 8:  fw_3
       mpdaemon fwd lpd dtlsd rtmd in.asessiond dtpsd fwpushd in.acapd vpnd in.ahclientd cprid cpd
CPU 9:  fw_2
       mpdaemon fwd lpd dtlsd rtmd in.asessiond dtpsd fwpushd in.acapd vpnd in.ahclientd cprid cpd
CPU 10: fw_1
       mpdaemon fwd lpd dtlsd rtmd in.asessiond dtpsd fwpushd in.acapd vpnd in.ahclientd cprid cpd
CPU 11: fw_0
       mpdaemon fwd lpd dtlsd rtmd in.asessiond dtpsd fwpushd in.acapd vpnd in.ahclientd cprid cpd
CPU 12:
CPU 13:
CPU 14:
CPU 15:
All:
The current license permits the use of CPUs 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11 only.
источник

AK

Alexander Kononov in Check Point Community (RUS)
Это с активной, выше
источник

AK

Alexander Kononov in Check Point Community (RUS)
Cо второй ноды: ниже
источник

AK

Alexander Kononov in Check Point Community (RUS)
[Expert@msk3mod:0]# fw ctl affinity -l -v -r
CPU 0:  eth0 (irq 135) eth1 (irq 150) eth2 (irq 140) eth3 (irq 145)
       fw_7
CPU 1:  fw_6
CPU 2:  fw_5
CPU 3:  fw_4
CPU 4:  fw_3
CPU 5:  fw_2
CPU 6:  fw_1
CPU 7:  fw_0
CPU 8:
CPU 9:
CPU 10:
CPU 11:
CPU 12:
CPU 13:
CPU 14:
CPU 15:
All:    mpdaemon fwd lpd dtlsd rtmd in.asessiond dtpsd vpnd in.acapd fwpushd cprid cpd
The current license permits the use of CPUs 0, 1, 2, 3, 4, 5, 6, 7 only.
источник

AK

Alexander Kononov in Check Point Community (RUS)
В общем после изменения CoreXL через CPconfig на 8, вроде все встало ок
источник

IA

Ilia Anokhin in Check Point Community (RUS)
источник
2021 May 21

🏊

🏊 IS אליהוס in Check Point Community (RUS)
друзья напомните в Чеке  синаткиси curl какой ? и есть ли он вообще
источник

A

Alexey in Check Point Community (RUS)
curl_cli, синтаксис примерно тот же, только порезанный
источник

🏊

🏊 IS אליהוס in Check Point Community (RUS)
он порты: понимает ?
источник