Support Center > Search Results > SecureKnowledge Details
Outgoing connections from cluster members are sent with member's Physical IP address instead of cluster Virtual IP address
Symptoms
  • Outgoing connections from cluster members are sent with member's Physical IP address instead of Cluster Virtual IP address.
Cause

The Cluster Hide and Fold is disabled (controlled via the attribute "perform_cluster_hide_fold" in Cluster Object in Security Management Server database).

Value of attribute perform_cluster_hide_fold in Cluster Object controls the following:

  • Whether outgoing connections from cluster members will be hidden behind Cluster Cluster Virtual IP address - i.e., sent with Source IP address of Cluster Virtual IP address, or sent with Source IP address of member's Physical IP address
  • Whether incoming connections sent to Cluster Virtual IP address will be folded to member's Physical IP address, or the Destination IP Address will remain as Cluster Virtual IP address.
Value of
attribute
How connections are Hidden / Folded by Cluster
true ("1")
(default)
  • Outgoing connections from cluster members will be sent with Source IP address of Cluster Virtual IP address (hidden behind Cluster VIP)
  • Incoming connections sent to Cluster Virtual IP address will be folded to member's Physical IP address (in case of VSX cluster, with Destination IP address that belongs to cluster Internal Communication Network)
false ("0")
  • Outgoing connections from cluster members will be sent with Source IP address of member's Physical IP address (in case of VSX cluster, with Source IP address that belongs to cluster Internal Communication Network)
  • Incoming connections sent to Cluster Virtual IP address will not be folded to member's Physical IP address (the Destination IP Address will remain as Cluster Virtual IP address)

Solution
Note: To view this solution you need to Sign In .