Support Center > Search Results > SecureKnowledge Details
'Error: In a VSX cluster, IPv6-only interfaces are not supported' message during configuration push to VSX cluster object Technical Level
Symptoms
  • Unable to push configuration to VSX cluster object after conversion from Security Gateway to VSX Gateway.

  • "Error: In a VSX cluster, IPv6-only interfaces are not supported" message during configuration push from Security Management Server / Main Domain Management Server to VSX cluster object.
Cause

Per sk91141 (R76 Known Limitations), when converting from Security Gateway cluster to VSX cluster, manual modifications must be made to the VSX object in the database to remove the IPv6 settings from the Sync interface.


Solution

When opening the VSX cluster object in SmartDashboard, and choosing 'Topology', the Sync interface is seen in the interfaces section without IPv4 address, but with ::/0 address in the 'IPv6 Address' column.

Example for eth3:

This needs to be removed to allow for configuration push to be successful:

  1. Close all SmartConsole windows (SmartDashboard, SmartView Tracker, etc.).

  2. Connect to Security Management Server / Main Domain Management Server (where VSX cluster object was created) with GuiDBedit Tool.

  3. In the left upper pane, go to 'Table' - 'Network Objects' - 'network_objects'.

  4. In the right upper pane, select the relevant VSX Cluster object.

  5. In the lower pane, go to interfaces container.

  6. Find the Sync interface, and remove the zero IP address ('::'):

    • right-click on the ipaddr6 field - 'Edit...' - remove the :: - click on 'OK'

    • right-click on the netmask6 field - 'Edit...' - remove the :: - click on 'OK'


    Example:


  7. In the left upper pane, go to 'Table' - 'Other' - 'vs_slot_objects'.

  8. In the right upper pane, select the relevant VSX Cluster object.

  9. In the lower pane, go to interfaces container.

  10. Find the Sync interface, and remove the zero IP address ('::'):

    • right-click on the ipaddr6 field - 'Edit...' - remove the :: - click on 'OK'

    • right-click on the netmask6 field - 'Edit...' - remove the :: - click on 'OK'


    Example:


  11. Save the changes: go to 'File' menu - 'Save All'.

  12. Close the GuiDBedit Tool.

  13. Connect to Security Management Server / Main Domain Management Server (where VSX cluster object was created) with SmartDashboard.

  14. Open the VSX Cluster object - go to 'Topology' pane - the Sync interface should not show any values in the 'IPv6 Address' column:

    Example:


  15. Click on 'OK' to push the configuration to VSX cluster members.

  16. Install the policy onto the VSX Cluster object.

 


 

This has also been seen relating to 'routed' pnote reporting its state as 'problem' on R76 ClusterXL on Gaia OS. Refer to sk92787 (How to debug ClusterXL failovers caused by RouteD daemon on Gaia OS).

A reboot may be required to fix this after applying the configuration.

This solution is about products that are no longer supported and it will not be updated

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment