Make sure you have multicast enabled on the Switch.  You may
also need to enable IGMP.


On Fri, 17 Sep 2004, Previtera, Sal wrote:

> You are welcome Torkel,
>
> The preference will be Multicast, since it is not Broadcast(ed) on all your
> interfaces, in ours we have 7 different interface handling different type of
> traffics from various vendors, VPN, DMZ, etc
>
> With Multicast, the NIC has to join a Multicast group in the Switch.
>
> Stuff is not broadcasted to everyone but only to the NIC(s) belonging to
> that particular Multicast group in the Switch. You can have multiple
> Multicast Groups in a switch.
>
> Supposedly, Load Sharing works better with Multicast...but HA is good enough
> for us right now.
>
> That is the extent of my limited knowledge.
> Regards,
> Sal.
>
> -----Original Message-----
> From: Torkel Mathisen [mailto:[EMAIL PROTECTED]
> Sent: Friday, September 17, 2004 9:32 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [FW-1] FLAPPING CROSSOVER
>
> Thank you Sal. It seemed to fix our problem. I don't see
> any of these sync messages anymore.
>
> You sure made my day.. well, in fact my whole week :)
>
> Do you know the difference between using broadcast or
> multicast?  Is one prefered over the other ?
>
> Regards,
> Torkel
>
> > -----Original Message-----
> > From: Previtera, Sal [mailto:[EMAIL PROTECTED]
> > Sent: 16. september 2004 19:39
> > To: [EMAIL PROTECTED]
> > Subject: Re: [FW-1] FLAPPING CROSSOVER
> >
> >
> > The problem is multicast and the type of Switch you are using
> > Try Broadcast instead, at the firewalls (both of them) issue
> > the following
> > commands;
> >
> > cphaconf set_ccp broadcast   (change to broadcast mode)
> >
> > cphaprob -a if  (see if all interface are using broadcast)
> >
> > If you do want to use broadcast, then you have to figure out why the
> > multicast version of Checkpoint and the Switch Vendor version are
> > incompatible.
> >
> >
> >
> > -----Original Message-----
> > From: Torkel Mathisen [mailto:[EMAIL PROTECTED]
> > Sent: Thursday, September 16, 2004 10:03 AM
> > To: [EMAIL PROTECTED]
> > Subject: Re: [FW-1] FLAPPING CROSSOVER
> >
> > Hi
> >
> > We also got some problems with flapping crossover or atleast
> > clusterxl.
> >
> > It may or not be the same problem as this.
> >
> > In our log we see this all the time:
> >
> > cluster_info: (ClusterXL) Interface Active Check on member 2
> > (10.254.254.2)
> > detected a problem (5 interfaces required, only 4 up).
> > cluster_info: (ClusterXL) interface eth3 of member 2
> > (10.254.254.2) is down
> > (receive down, transmit down)
> > cluster_info: (ClusterXL) Interface Active Check on member 2
> > (10.254.254.2)
> > status OK.
> > cluster_info: (ClusterXL) member 2 (10.254.254.2) is up.
> > cluster_info: (ClusterXL) member 2 (10.254.254.2) is standby.
> > cluster_info: (ClusterXL) interface eth3 of member 2
> > (10.254.254.2) is up
> >
> > A bit futher down (or just a little bit before, depending on
> > how you look at it) we get:
> > cluster_info: (ClusterXL) member 2 (10.254.254.2) is down.
> >
> > Note that the sync-interface is NOT eth3 so it actually reports
> > down on another interface.
> >
> > You see something like that in your logs Annette?
> >
> > And does anyone have an idea?
> >
> > Cluster running SPLAT R55 121 with Checkpoint HA only.
> > Interfaces is Intel e1000 which is autonegotiated to 1000 full.
> >
> > Regards,
> > Torkel
> >
> >
> > > -----Original Message-----
> > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> > > Sent: 15. september 2004 15:31
> > > To: [EMAIL PROTECTED]
> > > Subject: Re: [FW-1] FLAPPING CROSSOVER
> > >
> > >
> > > Are you running ClusterXL, or other? What OS? There are quite
> > > a few bugs I
> > > know of in just ClusterXL alone with synch...
> > > Perhaps I may be able to help you. Let the mailing list know. :-)
> > >
> > >
> > > Regards,
> > > Matt Goddard
> > > Security Information Team
> > > Schneider National
> > > 920-592-4787
> > > [EMAIL PROTECTED]
> > >
> > >
> > >
> > > |---------+-------------------------------------------->
> > > |         |           "Garner, Annette K **BETH"       |
> > > |         |           <[EMAIL PROTECTED]>     |
> > > |         |           Sent by: Mailing list for        |
> > > |         |           discussion of Firewall-1         |
> > > |         |           <[EMAIL PROTECTED]|
> > > |         |           KPOINT.COM>                      |
> > > |         |                                            |
> > > |         |                                            |
> > > |         |           09/15/2004 06:18 AM              |
> > > |         |           Please respond to Mailing list   |
> > > |         |           for discussion of Firewall-1     |
> > > |         |                                            |
> > > |---------+-------------------------------------------->
> > >
> > > >-------------------------------------------------------------
> > > ---------------------------------|
> > >   |
> > >                                    |
> > >   |       To:
> > > [EMAIL PROTECTED]
> > >                |
> > >   |       cc:
> > >                                    |
> > >   |       Subject:  [FW-1] FLAPPING CROSSOVER
> > >                                    |
> > >
> > > >-------------------------------------------------------------
> > > ---------------------------------|
> > >
> > >
> > >
> > >
> > > I have swapped out the cable and switched to a new nic with
> > > the no luck.
> > > I turned off auto-negotiated and set it to 100baseTX-FD
> > > flow-control on
> > > both boxes.
> > >
> > >
> > >
> > > Thanks,
> > >
> > > Annette
> > >
> > >
> > > =================================================
> > > To set vacation, Out-Of-Office, or away messages,
> > > send an email to [EMAIL PROTECTED]
> > > in the BODY of the email add:
> > > set fw-1-mailinglist nomail
> > > =================================================
> > > To unsubscribe from this mailing list,
> > > please see the instructions at
> > > http://www.checkpoint.com/services/mailing.html
> > > =================================================
> > > If you have any questions on how to change your
> > > subscription options, email
> > > [EMAIL PROTECTED]
> > > =================================================
> > >
> > > =================================================
> > > To set vacation, Out-Of-Office, or away messages,
> > > send an email to [EMAIL PROTECTED]
> > > in the BODY of the email add:
> > > set fw-1-mailinglist nomail
> > > =================================================
> > > To unsubscribe from this mailing list,
> > > please see the instructions at
> > > http://www.checkpoint.com/services/mailing.html
> > > =================================================
> > > If you have any questions on how to change your
> > > subscription options, email
> > > [EMAIL PROTECTED]
> > > =================================================
> > >
> >
> > =================================================
> > To set vacation, Out-Of-Office, or away messages,
> > send an email to [EMAIL PROTECTED]
> > in the BODY of the email add:
> > set fw-1-mailinglist nomail
> > =================================================
> > To unsubscribe from this mailing list,
> > please see the instructions at
> > http://www.checkpoint.com/services/mailing.html
> > =================================================
> > If you have any questions on how to change your
> > subscription options, email
> > [EMAIL PROTECTED]
> > =================================================
> >
> > =================================================
> > To set vacation, Out-Of-Office, or away messages,
> > send an email to [EMAIL PROTECTED]
> > in the BODY of the email add:
> > set fw-1-mailinglist nomail
> > =================================================
> > To unsubscribe from this mailing list,
> > please see the instructions at
> > http://www.checkpoint.com/services/mailing.html
> > =================================================
> > If you have any questions on how to change your
> > subscription options, email
> > [EMAIL PROTECTED]
> > =================================================
> >
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
>

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to