cancel
Showing results for 
Search instead for 
Did you mean: 

MWG 6.8.7 - HA Cluster, Suspend and Resume

Jump to solution

We are using McAfee Webgateway 6.8.7 Build 7306 in HA-Cluster Mode.

In Configuration / Appliance / High Availability there are the buttons

Suspend Current Node "Suspend"
Resume Current Node "Resume"

When pressing the button "Suspend" we cannot see the result of suspending the Applicane from the Cluster in WebUI.

Where can we see if a Cluster Member is suspended or running?

on 22.09.10 14:04:14 MESZ
0 Kudos
1 Solution

Accepted Solutions
asabban
Level 17

Re: MWG 6.8.7 - HA Cluster, Suspend and Resume

Jump to solution

Hello,

if you suspend a node this won't be visible from the GUI. You can check on the command line:

Not suspended:

[root@VM-MWG6-192 ~]# cibadmin -Q -o constraints
<constraints/>

Suspended:

[root@VM-MWG6-192 ~]# cibadmin -Q -o constraints
<constraints>
   <rsc_location id="gui-standby-CLUSTER_IP-VM-MWG6-192" rsc="CLUSTER_IP">
     <rule id="gui-standby-rule-CLUSTER_IP-VM-MWG6-192" score="-INFINITY">
       <expression id="gui-standby-expr-CLUSTER_IP-VM-MWG6-192" attribute="#uname" operation="eq" value="VM-MWG6-192" type="string"/>
     </rule>
   </rsc_location>
</constraints>

As you can see a so called "contraint" is written. While all nodes are still online and belonging to the HA pair, the contraint prevents the node from receiving any traffic.

I hope this helps.

best,

Andre

0 Kudos
7 Replies

Re: MWG 6.8.7 - HA Cluster, Suspend and Resume

Jump to solution

Hello, is here no one understanding what I mean?

Especially the supporter from McAfee Support should be able to send an answer.

Thanks for your help!

0 Kudos

Re: MWG 6.8.7 - HA Cluster, Suspend and Resume

Jump to solution

I searched the manual and found the command

crm_mon

But even one of the cluster members is "supended" from HA cluster the status "online" is shown in output of this command.


============
Last updated: Mon Oct 25 08:00:05 2010
Current DC: dmz-webgw1.domain.tld (58dc5a0d-fc92-4365-89f3-27e628dfac79)
2 Nodes configured.
1 Resources configured.
============

Node: dmz-webgw1.doamin.tld (58dc5a0d-fc92-4365-89f3-27e628dfac79): online
Node: dmz-webgw2.domain.tld (7b7d101a-1c9d-4343-a6f0-261fe691c4f8): online

Clone Set: CLUSTER_IP
    resource_CLUSTER_IP:0       (heartbeat:Smiley Surprisedcf:IPaddr2):       Started dmz-webgw1.domain.tld
    resource_CLUSTER_IP:1       (heartbeat:Smiley Surprisedcf:IPaddr2):       Started dmz-webgw2.domain.tld

0 Kudos

Re: MWG 6.8.7 - HA Cluster, Suspend and Resume

Jump to solution

Hello,

is really no one of McAfee Support able to answer my question?

In the meanwhile we did update to Build 8378.

Even if the answer is "No, the product does not have such a feature" would be okay. Then i could stop searching for a solution myself.

Thanks in advance.

on 19.11.10 14:51:35 MEZ
0 Kudos
salanis
Level 10

Re: MWG 6.8.7 - HA Cluster, Suspend and Resume

Jump to solution

Good Day-

I will post a troubleshooting document for you but do not have this at hand at the moment.

If this is urgent, please call support and they'll gladly provide this for you.

0 Kudos
salanis
Level 10

Re: MWG 6.8.7 - HA Cluster, Suspend and Resume

Jump to solution

As far as setting up the current HA here are a couple tips:
# shows the CLUSTERIP settings including V-IP, V-MAC and hasmode
iptables -L

# start/stop/restart monitoring daemon
/etc/init.d/wwmon (start|stop|restart)

# start/stop/restart heartbeat daemon
/etc/init.d/heartbeat (start|stop|restart)

# Shows the assigned IPs per interface and should list the CLUSTERIP when its active
ip addr show

# Shows the current status of the wwmon script that runs to monitor the Webwasher service availability. If this tool thinks the Webwasher is not available, a "mon-" constraint will be set.
wwmon -d -n

# messages has really good messages about the heartbeat status
less /var/log/messages

KB64258, found on mysupport.mcafee.com explains how to implement the static ARP or CAM entries on the switch.

https://kc.mcafee.com/corporate/index?page=content&id=KB64258

0 Kudos

Re: MWG 6.8.7 - HA Cluster, Suspend and Resume

Jump to solution

Thanks for your help!

This is exactely what i´ve been searching for.

0 Kudos
asabban
Level 17

Re: MWG 6.8.7 - HA Cluster, Suspend and Resume

Jump to solution

Hello,

if you suspend a node this won't be visible from the GUI. You can check on the command line:

Not suspended:

[root@VM-MWG6-192 ~]# cibadmin -Q -o constraints
<constraints/>

Suspended:

[root@VM-MWG6-192 ~]# cibadmin -Q -o constraints
<constraints>
   <rsc_location id="gui-standby-CLUSTER_IP-VM-MWG6-192" rsc="CLUSTER_IP">
     <rule id="gui-standby-rule-CLUSTER_IP-VM-MWG6-192" score="-INFINITY">
       <expression id="gui-standby-expr-CLUSTER_IP-VM-MWG6-192" attribute="#uname" operation="eq" value="VM-MWG6-192" type="string"/>
     </rule>
   </rsc_location>
</constraints>

As you can see a so called "contraint" is written. While all nodes are still online and belonging to the HA pair, the contraint prevents the node from receiving any traffic.

I hope this helps.

best,

Andre

0 Kudos