Support Center > Search Results > SecureKnowledge Details
Full Synchronization issues on cluster member Technical Level
  • Output of the "cphaprob syncstat" command shows that one of the cluster members is in "Down" state.

  • Output of the "cphaprob list" command on the problematic member shows:
    Device Name: Synchronization
    Current state: problem

    However - and this is very important distinction, at the same time it shows:
    Device Name: Filter
    Current state: ok

  • Output of "cphaprob syncstat" command on both members shows in the "Sync:" section that there is a large discrepancy
    (or even zero values) in the "Sync packets sent:" subsection - in the "total:" counter values.

        Version: new
        Status: Able to Send/Receive sync packets
        Sync packets sent:
         total : <VALUE>, ...
  • $FWDIR/log/fwd.elg file on a cluster member might show again and again:
    fwsyncn_connected: connection to IP_address_of_peer_member failed. error=-N
    (example: fwsyncn_connected: connection to failed. error=-5).

Possible causes:
  1. Mismatch in the MTU values on the Sync interfaces of cluster members and the network devices in the middle.
  2. The Sync mechanism was not fully initialized (e.g., after 'cpstop ; cpstart' commands or after reboot)

Note: To view this solution you need to Sign In .