cluster configuration check

Function

The cluster configuration check command enables the configuration consistency check among cluster members.

The undo cluster configuration check command disables the configuration consistency check among cluster members.

Format

cluster configuration check { audit-policy | auth-policy | bgp | cluster | hash | interface | license | nat-policy | ospf | security-policy | traffic-policy }

undo cluster configuration check

Parameters

Parameter	Description	Value
audit-policy	Checks the configuration consistency of the audit policy.	-
auth-policy	Checks the configuration consistency of the authentication policy.	-
bgp	Checks the configuration consistency of the BGP.	-
cluster	Checks the configuration consistency of the cluster.	-
hash	Checks the configuration consistency of the Hash. Only the USG6635E/6655E, USG6680E and USG6712E/6716E support this parameter.	-
interface	Checks the configuration consistency of the interface.	-
license	Checks the configuration consistency of the license.	-
nat-policy	Checks the configuration consistency of the NAT policy.	-
ospf	Checks the configuration consistency of the OSPF.	-
security-policy	Checks the configuration consistency of the security policy.	-
traffic-policy	Checks the configuration consistency of the traffic policy.	-

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

In cluster networking, most configurations can be backed up, such as security policies and NAT policies. In normal situations, configuration modification on the master node is synchronized to other members in the cluster. However, if the backup link fails or a device powers off, configurations among cluster members will be inconsistent. Configuration inconsistency may cause service anomalies upon a device switchover.

After running the cluster configuration check command, you can run the display cluster configuration check command to check the consistency check result.

Configuration Impact

After the function of configuring backup nodes in the cluster is enabled, the cluster configuration check command executed on the master device will be then executed on backup devices. The master device compares its configuration with all backup devices, whereas each backup device compares its configuration only with the master device.

Table 1 lists the items of the check on the configuration consistency among cluster devices.

**Table 1** Configuration consistency check items
Configuration Item	Description
Policy	Check whether the audit policy/authentication policy/NAT policy/security policy/traffic policy configurations are consistent.
Cluster	Check whether cluster-related configurations are consistent. Commands to be checked are as follows: business-group cluster detect-interval cluster id cluster track bfd-session cluster track interface cluster track ip-link cluster timer hello cluster timer holding-multiplier cluster backup node-num cluster session fast-sync enable cluster traffic-aggregation enable cluster ip-list cluster standby config enable cluster base config enable node priority ip-section cluster configuration auto-check interval cluster preempt delay bind ospf cluster adjust ospf-cost add
Hash	Checks the configuration consistency of the hash mode and hash gene next startup.
Interface	Items to be checked are as follows: Whether interfaces are consistent: The configurations are considered inconsistent as long as the interface configurations are different (the interface alias is not checked). Whether the number of VRRP groups configured on the same interfaces is consistent Whether the number of IPv4 addresses configured on the same interfaces is consistent Whether an IPSec policy applies to the same interfaces: Check whether the IPSec policy is applied to the interfaces. The contents of the IPSec policy are not checked. •Whether the ospf network-type configuration on the same interfaces is consistent
OSPF	Items to be checked are as follows: Whether the number of Networks in each OSPF process is consistent Whether each OSPF process imports direct routes Whether each OSPF process imports static routes Whether each OSPF process advertises default routes In case of OSPF process configuration inconsistency, the generated alarm and log information includes the names of the OSPF processes with different configurations.
BGP	Check whether BGP is configured. Do not check detailed BGP configurations.
License	Items to be checked are as follows: License status: activated, inactivated, invalid, or emergency Types of license control items Number of license resources Expiration date of antivirus, intrusion prevention, and URL remote query servers

Example

# Check OSPF configuration consistency.

C_No2_M<sysname> system-view
C_No2_M[sysname] cluster configuration check ospf