Hi all,
I have an issue with a cluster running R55 HFA18 .
Inittially each node had 6 attached interfaces but only 5 of them
where working and that $FWDIR/conf/discntd.if file was in use.
Now what changed is that eth5 need to be used.
What i did :
1) checked phisical cabling connections and switch VLANs
2) removed the eth5 line from discntd.if but let it there with no lines
(0
bytes)
3) configured the interfaces IPs and netmask
4) configured each node new interface as cluster interface at cluster
object and then the the IP of the cluster ( HA / new mode )
5) apply policy
6) reboot secondary node and follow everything thru smartview status,
dmesg, mii-tool and ifconfig
The problem starts : eth5 that before all that was allways UP now is down
thru ifconfig and up thu mii-tool.
Status monitor shows only 5 interfaces, not 6.
I did a "cpstop", "ipconfig --save eth5 up" and then "cpstart" ... after
the sync was finished, status monitor shows 6 interfaces and all green
stats.
Ask for a "reboot" again ... the problem persists.
Added to crontabd a line to run each 2 seconds running
"/etc/initd.d/network start"
That´s one workaround that solved by now, but does any1 had to deal with
it ?
[]'S
--
Antonio Costa
[EMAIL PROTECTED]
TI - Analista de Redes e Segurança
CCSE PLus / CCNA
MCSE / LinuxAdmin
Odebrecht Engenharia e Construção
Matriz Villa Lobos - São Paulo/SP
Av. Nações Unidas 4777, 11o. Andar
Tel.: +55-11-3443-9813/9000
Fax.: +55-11-3443-9861
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[EMAIL PROTECTED] Behalf Of Russell
Aspinwall
Sent: Tuesday, January 16, 2007 7:59 AM
To: [email protected]
Subject: Re: [FW-1] Question on license
Hi,
Is QoS supported as standard on VPN-1 or does a license have to be obtained?
fwguru wrote:
> Nik,
>
> Your license includes FW-1, VPN-1, and FG-1. You also have a VPN-1
> SecuRemote for 250 users and a VPN-1 Policy Server.
>
> Best,
> Neil Delacruz
>
>
> On 1/15/07, Aplin, Nik <[EMAIL PROTECTED]> wrote:
>>
>> Hi,
>>
>>
>>
>> I have a licence attached to a Enforcement module Nokia IPSO 530
>> 3.81running Checkpoint NG AI R55 running at a remote site and have
>> been asked to
>> setup a VPN to a Cisco pix. When I used to support nokia's a few years
>> back and I'm sure that the license had to have the encryption in the
>> key (3 DES etc) however the NG license I have attached doesn't have
>> any
>> refrence to the encryption key:
>>
>>
>>
>> CPMP-VFF-250-NG CPVP-VSR-250-NG CPVP-VPS-1-NG
>>
>>
>>
>> Can someone tell me if the new style of NG license automatically
>> supports
>> encryption or whether I need to get another license issued?
>>
>>
>>
>>
>>
>> Priestley
>>
>>
>>
>>
>>
>>
>> ________________________________________________________
>> This e-mail is confidential and intended solely for the use of the
>> individual(s) to whom it is addressed. If you are not the intended
>> recipient, be advised that you have received this e-mail in error and
>> that
>> any use, dissemination, forwarding, printing, copying of, or any action
>> taken in reliance upon it, is strictly prohibited and may be illegal.
>> Catlin Underwriting Agencies Limited, Catlin Insurance Company (UK) Ltd
>> and Wellington Underwriting Agencies Limited are authorised and
>> regulated by
>> the Financial Services Authority.
>> The registered office of Catlin Underwriting Agencies Limited
>> (incorporated and registered in England and Wales with company
>> number 1815126) and Catlin Insurance Company (UK) Ltd (incorporated and
>> registered in England and Wales with company number 5328622 ) is 6th
>> Floor,
>> 3 Minster Court, Mincing Lane, London EC3R 7DD.
>> Wellington Syndicate Services Limited is an Appointed Representative of
>> Catlin Underwriting Agencies Limited.
>> ________________________________________________________
>>
>>
>> ______________________________________________________________________
>> This email has been scanned by the MessageLabs Email Security System.
>> For more information please visit http://www.messagelabs.com/email
>> ______________________________________________________________________
>>
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
>
> ______________________________________________________________________
> This email has been scanned by the MessageLabs Email Security System.
> For more information please visit http://www.messagelabs.com/email
> ______________________________________________________________________
>
--
Regards
Russell
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================