> Source: [sk1000227](https://support.checkpoint.com/results/sk/sk1000227)

# sk1000227 - VSX Cluster Member remains down due to ROUTED PNOTE 

| Property | Value |
|----------|-------|
| Solution ID | sk1000227 |
| Date Created | 2026-10-04 |
| Last Modified | 2026-11-09 |
| Technical Level | Advanced |
| Products | Security Gateway, Check Point Firewall |
| Versions | R82.10, R82.20 |
| OS | Gaia |

## Symptoms

- *
  * In a VSX Cluster, a backup or Standby member for a Virtual System can remain **DOWN** after one of these operations:
    * Reboot
    * Upgrade
    * Jumbo Hotfix installation
  * The affected Virtual System uses a dynamic routing protocol, such as BGP or OSPF.
  * One or more Virtual Systems can be affected.
  * The affected Virtual System shows an active ROUTED Problem Notification (PNOTE), which remains in a problem state and does not clear automatically.

    *# cphaprob list*   
    > Device Name: routed  
    > Registration number: 4  
    > Timeout: none  
    > Current state: **problem**
  * The cluster state changes show that the member moved from **INIT** to **DOWN** during cluster start.

  * The `routed` process repeatedly reconnects to the cluster master.

  * The `routed` log files rotate very quickly because of a high-volume reconnect loop.

  * */var/log/routed_messages*
    show these errors:

    `cpcl_recv: restarting connection to master due to failure to read from the socket.`  
    `......`  
    `cpcl_recv: Failed to receive cluster message header, connection will need to be reestablished.`
  * */var/log/messages*
    show these errors:

    `First initialization of BGP. Wait for Active member to sync all information.`  
    `......`  
    `CLUS-111700: INIT -> DOWN caused by ROUTED PNOTE`
  * Additional `routed` messages can include failures to get cluster master information and messages that High Availability (HA) mode did not start.

## Cause

The issue occurs when the temporary `routed` socket associated with the active Virtual System is no longer available and the Standby member subsequently tries to reconnect.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content