Is State Synchronization working properly between the two members?

State Synchronization is enabled on both members in a cluster, and the Security Policy is
successfully installed. No protocols or services have been unselected for selective sync.
Review the fw tab -t connections -s output from both members. Is State Synchronization working
properly between the two members?

State Synchronization is enabled on both members in a cluster, and the Security Policy is
successfully installed. No protocols or services have been unselected for selective sync.
Review the fw tab -t connections -s output from both members. Is State Synchronization working
properly between the two members?

A.
Members A and B are synchronized, because ID for both members is identical in the
connections table.

B.
Members A and B are not synchronized, because #VALS in the connections table are not
close.

C.
Members A and B are synchronized, because #SLINKS are identical in the connections table.

D.
Members A and B are not synchronized, because #PEAK for both members is not close in the
connections table.



Leave a Reply 6

Your email address will not be published. Required fields are marked *


bergermn

bergermn

The fw tab -t connections -s output should look like this, but it is missing from the question.

MEMBER A:
HOST NAME ID #VLANS #PEAK #SLINKS
Localhost connections 8158 1553 1560 800

[expert@memberB]# fw tab -t connections -s

MEMBER B: NAME ID #VLAN #PEAK #SLINKS
localhost connections 8158 800 1001 800

bergermn

bergermn

Sorry it did not format correct, you can also go to exam 156-915.71 and find question 108, and you will see the image there.

florentjustin

florentjustin

Answer B.

sk35359
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk35359&partition=Expert&product=ClusterXL,

“VALS” value in connection table of cluster members are different :

Symptoms

The command output ‘fw tab -t connections -s’ reveals that #VALS values on both members are significantly different.

Active member:
fw tab -t connections -s
HOST NAME ID #VALS #PEAK #SLINKS
localhost connections 7247 41516 62370 131198

Backup member:
fw tab -t connections -s
HOST NAME ID #VALS #PEAK #SLINKS

Cause

You have disable synchronization of the connection for particular services (Advanced Service Properties -> ‘Synchronize connections on Cluster’ option is disabled).

If not, you have a problem in synchronization process.

Esteban

Esteban

B. Members A and B are not synchronized, because #VALS in the connections table are not
close.