|
今天做双机实验，一台cluster member的状态老是ready，也就是没有工作，正常应为active
另一台就很正常
重装依然如此
后台用命令查看状态也是ready
此时内网无法上网，将另一台active的 member 的ha关闭即可上网
后来上cpug寻求帮助，找到了可能会导致这种情况的原因有两个
Can occur in following scenarios:
1. When a cluster is upgraded from one version of
VPN-1 to another, and the cluster members have
different versions of VPN-1, the members with a
new version have the ready state and the
members with the previous version have the
active state.
2. Before a cluster member becomes active, it
sends a message to the rest of the cluster, and
then expects to receive confirmations from the
other cluster members agreeing that it will
become active. In the period of time before it
receives the confirmations, the machine is in the
ready state.
一是两个member的版本不同（这个可以排除了，肯定是一样的）
二是说了工作过程，在一个member变为active之前，它会向空闲的cluster发出一个信息，然后等待允许其他 active的回复信息。在没有收到回复信息的这段时间中，它的状态是ready的。（跟没说一样，没解决跟本问题）
最后在官方solution库中找到了原因
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk42096&js_peid=P-114a7ba5fd7-10001&partition=Gold/Platinum&product=ClusterXL
Symptoms | | | | ·
The output of the 'cphaprob state' command shows state 'Ready' on a cluster member in a cluster environment where CoreXL is installed on each member. | | Cause | | | |
There are 2 possible causes for this issue:
·
Member in the ‘Ready’ state has a later version of cluster software installed than other members of the cluster. ·
The member in 'Ready' state has a higher number of CoreXL instances than other members. |
同样，第一个原因就是版本的问题
第二个就是corexl 的个数问题，所有成员的corexl实体个数必须一样，在多个corexl实体的member中会出现ready状态
解决方法即是将此高核数的member降低核数
后运行命令cpconfig
选择7 配置checkpoint corexl
这时它会提示你当前 corexl的个数，当前为3个，这时看另一台member为2个
[attachimg]1707[/at
| 
IP卡
狗仔卡
发表于 2010-5-16 23:23:09
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
显身卡
发表于 2010-5-17 05:53:15
楼主