> Source: [sk181668](https://support.checkpoint.com/results/sk/sk181668)

# sk181668 - Cluster VIP is not attached to the Cluster active member after Azure HA failover

| Property | Value |
|----------|-------|
| Solution ID | sk181668 |
| Date Created | 2023-11-19 |
| Last Modified | 2026-05-11 |
| Technical Level | Advanced |
| Products | Cloud Firewall |
| Versions | R82.10, R81.20, R82 |
| OS | Gaia |
| Platform | Azure |

## Symptoms

- * 
  Cluster VIP fails to attach to the ClusterXL active member after Azure HA failover.

* 
  This exception appears in the *$FWDIR/log/azure_had.elg* file:

  ` AZURE-CP-HA-INFO- Traceback (most recent call last):`  
  `
  File "/etc/fw/scripts/azure_had.py", line 661, in poll`  
  `
  setLocalActive()`  
  `
  File "/etc/fw/scripts/azure_had.py", line 639, in setLocalActive`  
  `
  todo |= set_cluster_ips()`  
  `
  File "/etc/fw/scripts/azure_had.py", line 460, in set_cluster_ips`  
  `
  peer_nic = get_nic_by_suffix(peer_nics, cni)`  
  `
  File "/etc/fw/scripts/azure_had.py", line 408, in get_nic_by_suffix`  
  `
  raise Exception('cannot find the "*%s" interface', suffix)`  
  `
  Exception: ('cannot find the "*%s" interface', 'eth0')`

  OR
  `023-12-20 06:27:34,689-AZURE-CP-HA-INFO- Traceback (most recent call last):
  File "/etc/fw/scripts/azure_had.py", line 594, in poll
  setLocalActive()
  File "/etc/fw/scripts/azure_had.py", line 568, in setLocalActive
  todo |= set_cluster_ips()
  File "/etc/fw/scripts/azure_had.py", line 392, in set_cluster_ips
  'microsoft.compute/virtualmachines/' + hostname)[1]
  File "/opt/CPsuite-R80.40/fw1/scripts/rest.py", line 624, in arm
  max_time=self.max_time)
  File "/opt/CPsuite-R80.40/fw1/scripts/rest.py", line 200, in request
  response)
  rest.RequestException: HTTP/1.1 404 Not Found
  b'{"error":{"code":"ResourceNotFound","message":"The Resource \'microsoft.compute/virtualMachines/<>\' under resource group \'<>\' was not found. For more details please go to https://aka.ms/ARMResourceNotFoundFix"}}'`
* Azure HA is deployed with terraform template, and the NIC name resource was modified.

  OR

  Azure HA is deployed with terraform template, and the VM name resource was modified

## Cause

* Network Interface names must match the Cluster Member VM names with a suffix of '-eth0' and '-eth1'.
* Cluster Members VM names must match the Cluster name with a suffix of '1' and '2'.

Refer to [Cloud Firewall for Azure High Availability Cluster Deployment Guide](https://sc1.checkpoint.com/documents/IaaS/WebAdminGuides/EN/CP_CloudGuard_Network_for_Azure_HA_Cluster/Default.htm) \> Additional Information \> Changing Template Components.

<br />

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content