> Source: [sk170296](https://support.checkpoint.com/results/sk/sk170296)

# sk170296 - VIP interface does not move between cluster members during a failover in an Oracle cluster deployment

| Property | Value |
|----------|-------|
| Solution ID | sk170296 |
| Date Created | 2020-11-03 |
| Last Modified | 2026-04-14 |
| Technical Level | Advanced |
| Products | Cloud Firewall |
| Versions | R81.10 (EOS), R81.20, R82 |
| OS | Gaia |
| Platform | OCI |

## Symptoms

- * On a new deployment of an Oracle HA solution, VIP interface does not move between the cluster members during failover.
* The cluster is not able to communicate with the metadata services. To confirm this, run `tail -f $FWDIR/log/oracle_had.elg` on the active member:

  ```
  
  2020-11-01 05:11:56,089 OCI-CP-HA INFO Traceback (most recent call last):
  � File "/etc/fw//scripts/oracle_had.py", line 260, in main
  � � reconf()
  � File "/etc/fw//scripts/oracle_had.py", line 70, in reconf
  � � oci_client = oci.OCI()
  � File "/opt/CPsuite-R80.40/fw1/scripts/oci.py", line 170, in __init__
  � � identity = metadata('identity/')
  � File "/opt/CPsuite-R80.40/fw1/scripts/oci.py", line 58, in metadata
  � � resp.reason, data)
  TypeError: __init__() missing 1 required positional argument: 'body'
  ```

  <br />

* Standby member not able to reach out to the internet, for example ping 8.8.8.8

## Cause

The Gateway's outgoing traffic originates in the cluster VIP when they try to communicate with the OCI metadata services. The metadata services do not recognize the VIP as one of devices in the Oracle networks and refuse the request.

<br />

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content