CORRECT TEXT
Write the full fw command and syntax that you would use to troubleshoot ClusterXL sync issues.
Answer: fw tab -s -t connections
CORRECT TEXT Write the full fw command and syntax that you would use to troubleshoot ClusterXL sync issues.
CORRECT TEXT
Write the full fw command and syntax that you would use to troubleshoot ClusterXL sync issues.
fw ctl pstat
How would viewing the connections table help troubleshoot sync? Whereas sk37030 utilizes fw ctl pstat to troubleshoot sync.
yeah 100% right need to be fw ctl pstat
agree.
sk37030 utilizes fw debug fwd on/off to troubleshoot too. Why could not be it?
sk62570 say many commands to tshoot syncronization on ClusterXL:
cphaprob state
cphaprob -ia list
cpwd_admin list
ps auxwf
cpstat -f policy fw
fw ctl pstat
ls -l $FWDIR/state/__tmp/FW1
ls -l $FWDIR/state/local/FW1
cpvinfo $FWDIR/bin/fwd
on VSX : ls -l $FWDIR/state/__tmp/VSX
on VSX : ls -l $FWDIR/state/local/VSX
Can anyone explain better?
As per question “Write the full >FW< command.." and from that list is the only one
“fw ctl pstat” output has at the end sync status like this
Sync:
Version: new
Status: Able to Send/Receive sync packets
Sync packets sent:
total : 454, retransmitted : 0, retrans reqs : 0, acks : 6
Sync packets received:
total : 827, were queued : 0, dropped by net : 0
retrans reqs : 0, received 24 acks
retrans reqs for illegal seq : 0
dropped updates as a result of sync overload: 0
Callback statistics: handled 19 cb, average delay : 1, max delay : 1
if you run “fw -d ctl setsync off ” and then “fw ctl pstat” it shows:
Sync: off
Had scenario where sync was on but it shows pretty much the same output as when sync is working but instead “Status: Able to Send/Receive sync packets” I had
“Status: Unable to Send sync packets”
“Status: Unable to Receive sync packets”
There could be more scenarios (last one was related to no license installed).
Running on both members
GaiaFW1> fw tab -t connections -s
HOST NAME ID #VALS #PEAK #SLINKS
localhost connections 8158 17 53 20
-> You should have close ID numbers on both members
Running on both members
GaiaFW1
…
Sync:
Version: new
Status: Able to Send/Receive sync packets
Sync packets sent:
total : 3426, retransmitted : 246, retrans reqs : 298, acks : 531
Sync packets received:
total : 1723, were queued : 568, dropped by net : 47
retrans reqs : 224, received 605 acks
retrans reqs for illegal seq : 0
dropped updates as a result of sync overload: 0
GaiaFW2
…
Sync:
Version: new
Status: Able to Send/Receive sync packets
Sync packets sent:
total : 1851, retransmitted : 82, retrans reqs : 715, acks : 608
Sync packets received:
total : 3179, were queued : 701, dropped by net : 180
retrans reqs : 145, received 458 acks
retrans reqs for illegal seq : 0
dropped updates as a result of sync overload: 0
-> It’s difficult to interpret correctly the output
sk37029: Output of ‘fw ctl pstat’ command shows on both members under ‘Sync:’ that there is a huge discrepancy (or even zeros) in ‘total:’ under ‘Sync packets sent
In my case I have both members in sync and for me it is a huge discrepancy between numbers.
I think the right Check Point answer is (R75 style maybe)
fw tab -t connections -s
fw ctl pstat
Wrote 156-315.77 last Friday, and passed with 95%!
There were 89 questions of my 156-315.77 exam, many Fill in the Blank questions.
Around 10-15 new questions (IPS, Threat Prevention FW Monitor, VPN Tunnel Sharing, GAiA…etc.).
Be careful of questions on Command and Syntax, GAiA Command.
I used the PassLeader 156-315.77 dumps (http://www.passleader.com/156-315-77.html) (752q VCE and PDF dumps) for preparing for exam, all NEW questions were from it, the most valid 156-315.77 dumps!
What’s more:
PassLeader has published part of its 156-315.77 dumps on Google Drive for free here:
https://drive.google.com/open?id=0B-ob6L_QjGLpMm1FNVVkSEZZR3c
Good Luck!!!
fw ctl pstat is the correct answer.
I believe it’s fw ctl pstat