//
you're reading...

Questions

Is State Synchronization working properly between the two members?


State Synchronization is enabled on both members in a cluster, and the Security Policy is
successfully installed. No protocols or services have been unselected for selective sync.
Review the fw tab -t connections -s output from both members. Is State Synchronization working
properly between the two members?

A.
Members A and B are synchronized, because ID for both members is identical in the
connections table.

B.
Members A and B are not synchronized, because #VALS in the connections table are not
close.

C.
Members A and B are synchronized, because #SLINKS are identical in the connections table.

D.
Members A and B are not synchronized, because #PEAK for both members is not close in the
connections table.

Discussion

6 Responses to “Is State Synchronization working properly between the two members?”

  1. bergermn says:

    The fw tab -t connections -s output should look like this, but it is missing from the question.

    MEMBER A:
    HOST NAME ID #VLANS #PEAK #SLINKS
    Localhost connections 8158 1553 1560 800

    [expert@memberB]# fw tab -t connections -s

    MEMBER B: NAME ID #VLAN #PEAK #SLINKS
    localhost connections 8158 800 1001 800

  2. bergermn says:

    Sorry it did not format correct, you can also go to exam 156-915.71 and find question 108, and you will see the image there.

  3. florentjustin says:

    Answer B.

    sk35359
    https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk35359&partition=Expert&product=ClusterXL,

    “VALS” value in connection table of cluster members are different :

    Symptoms

    The command output ‘fw tab -t connections -s’ reveals that #VALS values on both members are significantly different.

    Active member:
    fw tab -t connections -s
    HOST NAME ID #VALS #PEAK #SLINKS
    localhost connections 7247 41516 62370 131198

    Backup member:
    fw tab -t connections -s
    HOST NAME ID #VALS #PEAK #SLINKS

    Cause

    You have disable synchronization of the connection for particular services (Advanced Service Properties -> ‘Synchronize connections on Cluster’ option is disabled).

    If not, you have a problem in synchronization process.

  4. Esteban says:

    B. Members A and B are not synchronized, because #VALS in the connections table are not
    close.

Leave a Reply