Ben,
It's hard to say from just this snippet of log file. The most typical
causes of our HA product failing over are misconfiguration, or a heartbeat
link that isn't capable of cleanly handling the load (i.e., latency
issues). If you can, I'd collect more information by obtaining our
sbinfo.sh script from http://www.stonesoft.com and sending the results to
[EMAIL PROTECTED] In your case, I'm guessing there's probably a minor
misconfiguration, as it looks like you have a backup heartbeat.
----------------------------------------------------------------
Mark Boltz Stonesoft Inc.
Network Security Specialist 115 Perimeter Center Place
[EMAIL PROTECTED] South Terraces, Suite 1000
Tel: +1 770 668 1125 Atlanta, GA 30346
Cel: +1 404 386 8500 USA
Fax: +1 770 668 1131 http://www.stonesoft.com
Support: 1-866-435-7324 (US Toll Free)
Support: 1-678-259-3400
"benjamin.c"
<benjamin.c@lineone. To: [EMAIL PROTECTED]
net> cc: [EMAIL PROTECTED]
Sent by: Subject: Strange Things Happening
with FW-1 and StoneBeat
firewalls-owner@List
s.GNAC.NET
04/12/2001 01:58 AM
Hi all
my primary firewall seems to be failing over to
the secondary minutes after being online. and i can't see
and errors why
i just get this is the messages file
Apr 12 06:44:23 pla sbd[412]: heartbeat established on link 0
Apr 12 06:44:23 pla sbd[412]: accepted peer's request to lock offline
Apr 12 06:44:25 pla sbd[412]: heartbeat duplicated
Apr 12 06:45:55 pla sbd-online[456]: start
Apr 12 06:45:55 pla sbd-online[456]: switching primary online
Apr 12 06:45:55 pla unix: fwstrmodrput: got fastpath nak (61170368)
Apr 12 06:45:55 pla last message repeated 5 times
Apr 12 06:45:55 pla unix: fwstrmodrput: got fastpath nak (611fb970)
Apr 12 06:45:55 pla last message repeated 5 times
Apr 12 06:49:01 plb sendmail[28451]: My unqualified host name (plb)
unknown;
sle
eping for retry
Apr 12 06:45:56 pla sendmail[467]: My unqualified host name (pla) unknown;
sleep
ing for retry
Apr 12 06:45:59 pla sbd[412]: went online by control request
Apr 12 06:46:04 pla unix: SUNW,qfe0: Using Internal Transceiver
Apr 12 06:46:04 pla unix: SUNW,qfe0: 100 Mbps full-duplex Link Up
Apr 12 06:46:04 pla unix: SUNW,qfe3: Using Internal Transceiver
Apr 12 06:46:04 pla unix: SUNW,qfe3: 100 Mbps full-duplex Link Up
Apr 12 06:46:26 pla sbd-online[478]: start
Apr 12 06:46:26 pla sbd-online[478]: switching primary offline
Apr 12 06:46:27 pla sendmail[489]: My unqualified host name (pla) unknown;
sleep
ing for retry
System Administrator
http://www.Apocolips.org.uk
( ) ( ) ( ) ( ) ( )
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]