Manually Fail-over in Checkpoint Firewall ClusterXL

只谈情不闲聊 提交于 2019-11-26 16:15:48
Trying to do a controlled failover on Checkpoint Firewall ClusterXL environment and found Checkpoint expert command clusterXL_admin in sk55081.

$FWDIR/bin/clusterXL_admin is a special shell script that not only makes the task of adding a new Critical Device easier, but also checks the change in member’s state and provides the user with the feedback.

This script registers a Critical Device called “admin_down”.

The syntax for bringing the cluster member Down is:
[[email protected]]# clusterXL_admin   down   [-p]

The syntax for bringing the cluster member Up is:
[[email protected]]# clusterXL_admin   up   [-p]

[-p] – optional flag, stands for “permanent” – operation will survive the reboot.

Also CCMA#40’s blog Expert Mode post has more details to explain some other commands to do force a failover (cluster/vrrp).

Here is a usage example in my environment:

CP-DMZ> cphaprob stat

Cluster Mode:   New High Availability (Active Up)

 with IGMP Membership

Number     Unique Address  Assigned Load   State       


1 (local)  1.1.1.1         0%              Down        

2          1.1.1.2         100%            Active      

CP-DMZ> expert
Enter expert password:
You are in expert mode now.

[[email protected]]# clusterXL_admin up -p

Setting member to normal operation …

Member current state is Standby

标签
易学教程内所有资源均来自网络或用户发布的内容,如有违反法律规定的内容欢迎反馈
该文章没有解决你所遇到的问题?点击提问,说说你的问题,让更多的人一起探讨吧!