Print Download PDF Send Feedback

Previous

Next

ClusterXL Commands

In This Section:

cphaconf

cphaprob

cphastart

cphastop

cphaconf

Description The cphaconf command configures ClusterXL.

Important - Running this command is not recommended. It should be run automatically, only by the Security Gateway or by Check Point support. The only exception to this rule is running this command with set_cpp option, as described below.

Usage

cphaconf [-i <computer id>] [-p <policy id>] [-b <db_id>] [-n <ClusterXL num>]
[-c <ClusterXL size>] [-m <service >] [-t <secured IF 1>...] start

cphaconf [-t <secured IF 1>...] [-d <disconnected IF 1>...] add
cphaconf clear-secured
cphaconf clear-disconnected
cphaconf stop
cphaconf init
cphaconf forward <on/off>
cphaconf debug <on/off>
cphaconf set_ccp <broadcast/multicast>
cphaconf mc_reload
cphaconf debug_data
cphaconf stop_all_vs

Syntax

Parameter

Description

set_ccp <broadcast/multicast>

Sets whether ClusterXL Control Protocol (CCP) packets should be sent with a broadcast or multicast destination MAC address. The default behavior is multicast. The setting created using this command will survive reboot.

Note: The same value (either broadcast or multicast) should be set on all ClusterXL members.

stop_all_vs

Stops the ClusterXL product on all Virtual Systems on a VSX Gateway.

cphaprob

Description The cphaprob command verifies that the cluster and the cluster members are working properly.

Usage

cphaprob -d <device> -t <timeout(sec)> -s <ok|init|problem> [-p] register
cphaprob -f <file> register
cphaprob -d <device> [-p] unregister
cphaprob -a unregister
cphaprob -d <device> -s <ok|init|problem> report
cphaprob [-i[a]] [-e] list
cphaprob state
cphaprob [-a] if

Syntax

Parameter

Description

cphaprob -d <device> -t <timeout(sec)> -s <ok|init|problem> [-p] register

Register <device> as a critical process, and add it to the list of devices that must be running for the cluster member to be considered active.

cphaprob -f <file> register

Register all the user defined critical devices listed in <file>.

cphaprob -d <device> [-p] unregister

Unregister a user defined <device> as a critical process. This means that this device is no longer considered critical.

cphaprob -a unregister

Unregister all the user defined <device>.

cphaprob -d <device> -s <ok|init|problem> report

Report the status of a user defined critical device to ClusterXL.

cphaprob [-i[a]] [-e] list

View the list of critical devices on a cluster member, and of all the other machines in the cluster.

cphaprob state

View the status of a cluster member, and of all the other members of the cluster.

cphaprob [-a] if

View the state of the cluster member interfaces and the virtual cluster interfaces.

cphastart

Description Running cphastart on a cluster member activates ClusterXL on the member. It does not initiate full synchronization. cpstart is the recommended way to start a cluster member.

cphastop

Description Running cphastop on a cluster member stops the cluster member from passing traffic. State synchronization also stops. It is still possible to open connections directly to the cluster member. In High Availability Legacy mode, running cphastop may cause the entire cluster to stop functioning.