Are you running New Mode HA?  Try switching from multicast to broadcast.

cphaconf set_ccp broadcast


The above may be unrelated.  Rather, it could be a kernel mem issue.
The fw kernel is set to boot to a max amount.  It does not matter that
you have 2Gigs.  You can set the kernel to boot with more mem.  But
according to CP, you don't have to do that.  You can turn on a "fix"
to this memory problem on Linux by editing the fwkern.conf file
located in the $FWDIR/boot/modules/ directory.  Add these two lines to
the file (if the file does not exist, create it):

fw_smem_use_alternate_malloc=1
fw_hmem_use_alternate_malloc=1

Reboot the modules.


For a lab environment 256MB, in use is a little high, isn't it?
Are you running any large number of connections through it?


-fwguru



On 4/13/05, Tom Brown <[EMAIL PROTECTED]> wrote:
> Hi
>
> I've still got my SPLAT HA cluster in the lab but its shortly going into
> the wild - I have noticed this today though and i'm wondering what can
> be done.
>
> CPHA failed to add multicast MAC address not enough memory
>
> the enforcement modules are running on SPLAT AI R55 HFA_13 which in turn
> is on a pair of Dell 1750's with 2GIG RAM each. I noticed that running a
> 'top' only about 256meg is in use but then again in the lab they are not
> really doing that much.
>
> thanks for any input
>
> Tom
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
>

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to