Your cluster member is showing a state of “Ready”. Which of the following is NOT a reason one
would expect for this behaviour?
A.
Firewall policy has not yet been installed to the firewall
B.
The firewall that is showing “Ready” has been upgraded but the other firewall has not yet been
upgraded
C.
One cluster member is configured for 32 bit and the other is configured for 64 bit
D.
CoreXL is configured differently on the two machines
A. Firewall policy has not yet been installed to the firewall
‘fw unloadlocal’ one of your cluster members, and your cluster will now be Active/Down (the no-policy member is now Down).
sk42096
Symptoms
Output of “cphaprob state” command on a cluster member shows the state “Ready”.
Cause
There are several possible reasons :
There are cluster members with a lower software version on this subnet / VLAN
[member with higher software version will go into state ‘Ready’].
The number of CoreXL FireWall instances on cluster members is different
[member with greater number of CoreXL FW instances will go into state ‘Ready’].
The ID numbers of CoreXL FireWall instances and handling CPU core numbers on cluster members are different.
On Gaia OS – Linux kernels on cluster members are different (32-bit vs 64-bit)
[member with higher kernel edition will go into state ‘Ready’].
On Gaia OS – Cluster member runs in VSX mode, while other members run in Gateway mode
[member in VSX mode will go into state ‘Ready’].