Module 'cluster' (ClusterXL)

Syntax:

fw ctl debug -m cluster + {all | <List of Debug Flags>}

Notes:

  • To print all synchronization operations in Check Point cluster in the debug output, enable these debug flags:

  • To print the contents of the packets in HEX format in the debug output (as "FW-1: fwha_print_packet: Buffer ..."), before you start the kernel debug, set this kernel parameter on each Cluster Member:

    fw ctl set int fwha_dprint_io 1

  • To print all network checks in the debug output, before you start the kernel debug, set this kernel parameter on each Cluster Member:

    fw ctl set int fwha_dprint_all_net_check 1

Flag

Description

arp

ARP Forwarding (see sk111956)

autoccp

Operations of CCP in Auto mode

ccp

Reception and transmission of Cluster Control Protocol (CCP) packets

cloud

Replies to the probe packets in CloudGuard IaaS

conf

Cluster configuration and policy installation

correction

Correction Layer

cu

Connectivity Upgrade (see sk107042)

drop

Connections dropped by the cluster Decision Function (DF) module (does not include CCP packets)

forward

Forwarding Layer messages (when Cluster Members send and receive a forwarded packet)

if

Interface tracking and validation (all the operations and checks on interfaces)

ifstate

Interface state (all the operations and checks on interfaces)

io

Information about sending of packets through cluster interfaces

log

Creating and sending of logs by cluster

Note - Also enable the debug flag "log" in Module 'fw' (Firewall).

mac

Current configuration of and detection of cluster interfaces

Note - Also enable the debug flags "conf" and "if" in this debug module

mmagic

Operations on "MAC magic" (getting, setting, updating, initializing, dropping, and so on)

msg

Handling of internal messages between Cluster Members

pivot

Operation of ClusterXL in Load Sharing Unicast mode (Pivot mode)

pnote

Registration and monitoring of Critical Devices (pnotes)

select

Packet selection (includes the Decision Function)

stat

States of cluster members (state machine)

subs

Subscriber module (set of APIs, which enable user space processes to be aware of the current state of the ClusterXL state machine and other clustering configuration parameters)

timer

Reports of cluster internal timers

trap

Sending trap messages from the cluster kernel to the RouteD daemon about Master change