7 Replies Latest reply on Nov 22, 2010 1:15 AM by mcafee-com-user

    MWG 6.8.7 - HA Cluster, Suspend and Resume

    mcafee-com-user

      We are using McAfee Webgateway 6.8.7 Build 7306 in HA-Cluster Mode.

       

      In Configuration / Appliance / High Availability there are the buttons

       

      Suspend Current Node "Suspend"
      Resume Current Node "Resume"

       

      When pressing the button "Suspend" we cannot see the result of suspending the Applicane from the Cluster in WebUI.

       

      Where can we see if a Cluster Member is suspended or running?

       

       

      on 22.09.10 14:04:14 MESZ
        • 1. Re: MWG 6.8.7 - HA Cluster, Suspend and Resume
          mcafee-com-user

          Hello, is here no one understanding what I mean?

           

          Especially the supporter from McAfee Support should be able to send an answer.

           

          Thanks for your help!

          • 2. Re: MWG 6.8.7 - HA Cluster, Suspend and Resume
            mcafee-com-user

            I searched the manual and found the command

             

            crm_mon

             

            But even one of the cluster members is "supended" from HA cluster the status "online" is shown in output of this command.


            ============
            Last updated: Mon Oct 25 08:00:05 2010
            Current DC: dmz-webgw1.domain.tld (58dc5a0d-fc92-4365-89f3-27e628dfac79)
            2 Nodes configured.
            1 Resources configured.
            ============

             

            Node: dmz-webgw1.doamin.tld (58dc5a0d-fc92-4365-89f3-27e628dfac79): online
            Node: dmz-webgw2.domain.tld (7b7d101a-1c9d-4343-a6f0-261fe691c4f8): online

             

            Clone Set: CLUSTER_IP
                resource_CLUSTER_IP:0       (heartbeat::ocf:IPaddr2):       Started dmz-webgw1.domain.tld
                resource_CLUSTER_IP:1       (heartbeat::ocf:IPaddr2):       Started dmz-webgw2.domain.tld

            • 3. Re: MWG 6.8.7 - HA Cluster, Suspend and Resume
              mcafee-com-user

              Hello,

               

              is really no one of McAfee Support able to answer my question?

               

              In the meanwhile we did update to Build 8378.

               

              Even if the answer is "No, the product does not have such a feature" would be okay. Then i could stop searching for a solution myself.

               

              Thanks in advance.

               

               

              on 19.11.10 14:51:35 MEZ
              • 4. Re: MWG 6.8.7 - HA Cluster, Suspend and Resume

                Good Day-

                 

                I will post a troubleshooting document for you but do not have this at hand at the moment.

                 

                If this is urgent, please call support and they'll gladly provide this for you.

                • 5. Re: MWG 6.8.7 - HA Cluster, Suspend and Resume
                  asabban

                  Hello,

                   

                  if you suspend a node this won't be visible from the GUI. You can check on the command line:

                   

                  Not suspended:

                   

                  [root@VM-MWG6-192 ~]# cibadmin -Q -o constraints
                  <constraints/>

                   

                  Suspended:

                   

                  [root@VM-MWG6-192 ~]# cibadmin -Q -o constraints
                  <constraints>
                     <rsc_location id="gui-standby-CLUSTER_IP-VM-MWG6-192" rsc="CLUSTER_IP">
                       <rule id="gui-standby-rule-CLUSTER_IP-VM-MWG6-192" score="-INFINITY">
                         <expression id="gui-standby-expr-CLUSTER_IP-VM-MWG6-192" attribute="#uname" operation="eq" value="VM-MWG6-192" type="string"/>
                       </rule>
                     </rsc_location>
                  </constraints>

                   

                  As you can see a so called "contraint" is written. While all nodes are still online and belonging to the HA pair, the contraint prevents the node from receiving any traffic.

                   

                  I hope this helps.

                   

                  best,

                  Andre

                  • 6. Re: MWG 6.8.7 - HA Cluster, Suspend and Resume

                    As far as setting up the current HA here are a couple tips:
                    # shows the CLUSTERIP settings including V-IP, V-MAC and hasmode
                    iptables -L

                     

                    # start/stop/restart monitoring daemon
                    /etc/init.d/wwmon (start|stop|restart)

                     

                    # start/stop/restart heartbeat daemon
                    /etc/init.d/heartbeat (start|stop|restart)

                     

                    # Shows the assigned IPs per interface and should list the CLUSTERIP when its active
                    ip addr show

                     

                    # Shows the current status of the wwmon script that runs to monitor the Webwasher service availability. If this tool thinks the Webwasher is not available, a "mon-" constraint will be set.
                    wwmon -d -n

                     

                    # messages has really good messages about the heartbeat status
                    less /var/log/messages

                     

                    KB64258, found on mysupport.mcafee.com explains how to implement the static ARP or CAM entries on the switch.

                     

                    https://kc.mcafee.com/corporate/index?page=content&id=KB64258

                    • 7. Re: MWG 6.8.7 - HA Cluster, Suspend and Resume
                      mcafee-com-user

                      Thanks for your help!

                       

                      This is exactely what i´ve been searching for.