I checked with Nokia TAC and been told that during any changes via voyager,
if you click on the "back" button instead of "top" within voyager, you could
potentially corrupt the /config/active file.
 
If that is the case, why can't Nokia issues some kind of warning when ppl do 
that.
 


Eric Janz <[EMAIL PROTECTED]> wrote:
Hi,

we had the same problem using Nokia IP Clustering. At the beginnig we went 
crazy until we discovered that the problem was in the /config/active file. 
Our problem came as we reconfigured the cluster addresses. In fact, when 
we now need to change the cluster configuration we delete the whole 
cluster configuration, cleanup the remaining old configs (if some) from 
the /config/active file and reboot. After that we recreate the cluster 
with another cluster ID to get sure :-( and that way it works.

The first time we had this problem the gateway remained using the old 
cluster ip for the interface we changed it and was so unable to 
communicate due to that we reconfigured also the overlaying checkpoint 
engine and it did not recognize the old IP as belonging to him. (if I 
remind it well I thing it said something like local ip spoofing)

Well, this is the first time I hear that someone else had this problem. 
May it be a bug?

Eric Janz 
Departamento de Sistemas
Grupo Barceló Viajes

C\ 16 de Julio, 75
07009 Polígono Son Castelló
Palma de Mallorca - Baleares
Tel.: +34 971 448030
Fax.: +34 971 436986



Reinhard Stich 
Enviado por: Mailing list for discussion of Firewall-1 

18/10/2005 08:13
Por favor, responda a
Mailing list for discussion of Firewall-1 



Para
[email protected]
cc

Asunto
Re: [FW-1] Legacy VRRP configuration error in Nokia /config/active file






hi,

yes - I've seen that. even if you delete vrrp on one interface then 
the old vrrp-settings are still available in the /config/db/... file.

I'm not sure if this is a bug, because the settings were no longer 
active. looks like the settings are disabled in the config and not 
deleted there

cheers
reinhard

At 02:09 18.10.2005, you wrote:
>Has anyone run into this situation before?
>
>IPSO: 3.5FCS14, 3.7.1 build 004, 3.7.1 build 020
>Platform: IP350, IP380, IP650, IP530, IP740
>
>eth1 IP: 1.1.1.2/24
>eth1 VRRP: 1.1.1.1
>
>eth2 IP: 192.168.1.2/24
>eth2 vrrp: 192.168.1.1
>
>A few days later, I remove the VRRP IP of 1.1.1.1 and replace it 
>with VRRP IP of 1.1.1.3
>on eth1. Everything is done via Voyager. Everything looks fine.
>
>Amazingly, when I look at the /config/active file, I still see vrrp 
>ip address of 1.1.1.1,
>in addition to the 1.1.1.3 address.
>
>To fix the problem, I have to edit the /config/active file to remove 
>1.1.1.1 ip, save the file
>and reboot.
>
>Has anyone run into a similar problem like this? Is this a Nokia 
>bug or what? It does not
>happen all the time so it is hard to pinpoint it.
>
>TIA
>cisco4ng
>
>
>
>---------------------------------
> Yahoo! Music Unlimited - Access over 1 million songs. Try it free.
>
>=================================================
>To set vacation, Out-Of-Office, or away messages,
>send an email to [EMAIL PROTECTED]
>in the BODY of the email add:
>set fw-1-mailinglist nomail
>=================================================
>To unsubscribe from this mailing list,
>please see the instructions at
>http://www.checkpoint.com/services/mailing.html
>=================================================
>If you have any questions on how to change your
>subscription options, email
>[EMAIL PROTECTED]
>=================================================

-- 
Reinhard Stich ASSIST [EMAIL PROTECTED]
Internet Security AG, 1150 Wien, Johnstrasse 29
Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

                
---------------------------------
 Yahoo! Music Unlimited - Access over 1 million songs. Try it free.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to