The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
Some Remote Access VPN clients are not able to connect to ClusterXL in Load Sharing Unicast mode with enabled CoreXL
| Solution ID |
sk106745 |
| Product |
ClusterXL, IPSec VPN, CoreXL |
| Version |
R75, R76, R77, R77.10, R77.20, R77.30, R80.10 |
| Platform / Model |
All |
| Date Created |
06-Jul-2015
|
| Last Modified |
27-May-2019
|
Symptoms
Some Remote Access VPN clients are not able to connect to ClusterXL in Load Sharing Unicast mode.
Kernel debug ('fw ctl debug -m cluster + select') on the non-Pivot cluster member shows that sometimes the Source MAC of VPN packets is inverted incorrectly (refer to lines "fwha_select_ip_packet: The inverted back source MAC address will be ...").
Disabling CoreXL on all cluster members resolves the issue.
Solution
|
Note: To view this solution you need to
Sign In
.
|
