Hi guys, I been having some troubles with floodgate and IPSO 3.8, anyone had the same problem, when I try to install the policy it seems to be loosing connectivity. Anyone had the same problem? I did a rollback to IPSO 3.7.1 and everything returned to normal.
Best Regards Lino E. Avila [EMAIL PROTECTED] -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[email protected] <mailto:[email protected]> ] On Behalf Of Steffen Sent: Thursday, June 30, 2005 8:58 AM To: [email protected] Subject: Re: [FW-1] Nokia trouble and here is the problem - the Nokia is under such a heavy load at this moments that it does not route any traffic anymore. I even cannot ssh or https to it. And these effects are global, not only for the one vlan where the duplicate is in... > > > > > > At 14:19 30.06.2005, you wrote: > > > >Hi, > > > >I am currently seeing situations where a duplicate IP address (a > > client in > > > >my lan duplicating VRRP > > > >address) forces a pair of 380s (IPSO 3.7.1) to stop working. At > > > >this time both Nokia suffer from a high CPU load, they are not > > > >reachable with SSH, HTTPs, they respond to pings in only 10 %. CP > > > >Smart View Status show that on the side of FW-1 everything is > > > >fine. VRRP is fine but they do not route any traffic anymore. > > > >When I log on to the console I see lots of messages: > > > >[LOG_CRIT] kernel: plicate IP address 10.49.136.1! sent from mac address: > > > >00:50:56:8a:1e:b3 > > > >[LOG_ERR] kernel: duplicate IP address 10.49.136.1! sent from mac > > address: > > > >00:50:56:8a:1e:b3 > > > >In the messages file I also see > > > >[LOG_CRIT] kernel: FW-1: Log buffer is full [LOG_CRIT] kernel: > > > >FW-1: fw_asm_send_log: fwloghandle_send_log failed As soon as the > > > >duplicate IP has gone everything is fine again - I can reach them > > > >again, they work as expected and cpu load is reasonable. > > > >I searched Nokia KB for a way to prevent this and found Res 1693, > > > >but > > this > > > >does not match my case. > > > >Has anybody an idea how I can prevent the Nokia from this behaviour? > > > >Steffen > > > > > > > > > > > > > > > > > > > > > > > >___________________________________________________________ > > > >Gesendet von Yahoo! Mail - Jetzt mit 1GB Speicher kostenlos - > > > >Hier > > > >anmelden: http://mail.yahoo.de <http://mail.yahoo.de> > > > > > > > >================================================= > > > >To set vacation, Out-Of-Office, or away messages, send an email > > > >to [EMAIL PROTECTED] > > > >in the BODY of the email add: > > > >set fw-1-mailinglist nomail > > > >================================================= > > > >To unsubscribe from this mailing list, please see the > > > >instructions at http://www.checkpoint.com/services/mailing.html <http://www.checkpoint.com/services/mailing.html> > > > >================================================= > > > >If you have any questions on how to change your subscription > > > >options, email [EMAIL PROTECTED] > > > >================================================= > > > > > > -- > > > Reinhard Stich ASSIST [EMAIL PROTECTED] > > > Internet Security AG, 1150 Wien, Johnstrasse 29 > > > Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 > > > > > > ================================================= > > > To set vacation, Out-Of-Office, or away messages, send an email to > > > [EMAIL PROTECTED] > > > in the BODY of the email add: > > > set fw-1-mailinglist nomail > > > ================================================= > > > To unsubscribe from this mailing list, please see the instructions > > > at http://www.checkpoint.com/services/mailing.html <http://www.checkpoint.com/services/mailing.html> > > > ================================================= > > > If you have any questions on how to change your subscription > > > options, email [EMAIL PROTECTED] > > > ================================================= > > > > > > > > > > > > > > > > > > >___________________________________________________________ > >Gesendet von Yahoo! Mail - Jetzt mit 1GB Speicher kostenlos - Hier > >anmelden: http://mail.yahoo.de <http://mail.yahoo.de> > > > >================================================= > >To set vacation, Out-Of-Office, or away messages, send an email to > >[EMAIL PROTECTED] > >in the BODY of the email add: > >set fw-1-mailinglist nomail > >================================================= > >To unsubscribe from this mailing list, please see the instructions at > >http://www.checkpoint.com/services/mailing.html <http://www.checkpoint.com/services/mailing.html> > >================================================= > >If you have any questions on how to change your subscription options, > >email [EMAIL PROTECTED] > >================================================= > > -- > Reinhard Stich ASSIST [EMAIL PROTECTED] > Internet Security AG, 1150 Wien, Johnstrasse 29 > Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 > > ================================================= > To set vacation, Out-Of-Office, or away messages, send an email to > [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, please see the instructions at > http://www.checkpoint.com/services/mailing.html <http://www.checkpoint.com/services/mailing.html> > ================================================= > If you have any questions on how to change your subscription options, > email [EMAIL PROTECTED] > ================================================= > ___________________________________________________________ Gesendet von Yahoo! Mail - Jetzt mit 1GB Speicher kostenlos - Hier anmelden: http://mail.yahoo.de <http://mail.yahoo.de> ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html <http://www.checkpoint.com/services/mailing.html> ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
