The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
Simultaneously pinging the cluster members and the VIP address stopped working after editing the $FWDIR/boot/modules/fwkern.conf file
Technical Level
Solution ID
sk105539
Technical Level
Product
ClusterXL
Version
R77.20, R77.10 (EOL), R77 (EOL), R77.30 (EOL)
OS
Gaia, SecurePlatform 2.6
Platform / Model
All
Date Created
07-Apr-2015
Last Modified
18-Nov-2019
Symptoms
Simultaneously pinging the ClusterXL High Availability members and the Cluster VIP address stopped working - only 2 pings out of 3 pings work (to IP address of Active member, to IP address of Standby member, and to Cluster VIP).
Output of "fw ctl get int fw_allow_simultaneous_ping" returns value "1" - i.e., this parameter is enabled (refer to sk26874).
Cause
The kernel parameter "fwha_forw_packet_to_not_active=1" was added multiple times to the $FWDIR/boot/modules/fwkern.conf file on the cluster members.