"some older hardware can not work with SPLAT 2.6 kernel".... Well, I had not realized that... good point.
Although checking the Hardware Compatibility List, I see the Sun Fire X2200 M2, which our friend Crist currently has in production running kernel 2.4, also supports kernel 2.6, so I guess that means my suggestions are still valid. I hope they will be useful as well. Regards On Fri, May 16, 2008 at 8:40 PM, cisco4ng <[EMAIL PROTECTED]> wrote: > some older hardware can not work with SPLAT 2.6 kernel. It only works > with 2.4 kernel. For example, Dell PowerEdge 2450 and 2550 only works > with SPLAT 2.4 kernel. It refuses to install splat 2.6 kernel. > > Newer hardware only works with 2.6 kernel. For example, Sun X4200-M2 and > Dell 2950-III only works with SPLAT 2.6 kernel. > > Sergio Alvarez <[EMAIL PROTECTED]> wrote: > Check Point has always said having exactly the same platform on both > systems > of a cluster is a MUST, therefore even when I have no documentation or > first > hand experience with something like you are planning, I wouldn't risk it. > > Also is possible that if you ask Check Point support about this, they will > come up with the requirement mentioned above and will tell you it is not > officially supported, which is reason enough for me to never put something > like that in production. > > Now, given the fact one of the systems forcibly requires kernel 2.6, why > not > just reinstall the 2.4 machine with 2.6 and that way you have them both on > the exact same platform and avoid taking risks. I know its your production > firewall module, but you could replace it with the lab machine (already > with > 2.6 kernel) while reinstalling it with SPLAT 2.6 and the downtime should be > very short. > > Again, this is just my personal opinion without having experience mixing > 2.6 > and 2.4 kernels on a cluster and thinking on the best way to avoid issues > or > conflicts. > > Regards > > On Fri, May 16, 2008 at 3:23 PM, Crist Clark > wrote: > > > We are looking at taking an existing single-string firewall, > > and making it a cluster with ClusterXL. The existing firewall > > is running good ol' SecurePlatform R65 HFA_02. We have on hand > > a machine that is currently used in the lab to test network > > changes before they go operational. However, the test machine > > is not supported by the old 2.4 kernel SPlat. It's running > > the "new" 2.6 kernel SPlat. > > > > Now, both machines are the same arch (AMD Opteron CPUs) and > > are both running R65 HFA_02. I'm about, oh, 90% sure that > > running them together as a cluster would be OK, but it'd be > > great if someone could verify that they'd play well together > > in a cluster, that mixing the 2.4 kernel and 2.6 kernel SPlats > > in ClusterXL is not a Bad Thing. > > > > A co-worker brought up a really good point too. If the next HFA > > for the 2.4 kernel comes out a few days before/after the 2.6 > > version does, not a big deal. But are there some other issues > > with future support that I'm not considering? > > > > For details the 2.4 kernel is a Sun Fire X2200 M2 and the 2.6 > > kernel is a Sun Fire X4100 M2. The sad story is we originally > > bought the X4100 M2 for the operational firewall only to learn > > that the X4100, which Sun doesn't sell anymore, is supported > > by the 2.4 SPlat, but not the X4100 M2. So we got a X2200 M2. > > But then just weeks after the X2200 M2 went operational, Check > > Point came out with the 2.6 kernel SPlat that supports the > > X4100 M2. It'd be nice to use the X4100 M2 system, which was > > a sweet but $$$ lab machine, for what we originally purchased > > it for, an operational firewall. > > > > B¼information contained in this e-mail message is confidential, intended > > only for the use of the individual or entity named above. If the reader > > of this e-mail is not the intended recipient, or the employee or agent > > responsible to deliver it to the intended recipient, you are hereby > > notified that any review, dissemination, distribution or copying of this > > communication is strictly prohibited. If you have received this e-mail > > in error, please contact [EMAIL PROTECTED] > > > > Scanned by Check Point Total Security Gateway. > > > > ================================================= > > To set vacation, Out-Of-Office, or away messages, > > send an email to [EMAIL PROTECTED] > > in the BODY of the email add: > > set fw-1-mailinglist nomail > > ================================================= > > To unsubscribe from this mailing list, > > please see the instructions at > > http://www.checkpoint.com/services/mailing.html > > ================================================= > > If you have any questions on how to change your > > subscription options, email > > [EMAIL PROTECTED] > > ================================================= > > > > > > -- > Sergio Alvarez > (506)8301342 > > > > Scanned by Check Point Total Security Gateway. > > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > > > > > Scanned by Check Point Total Security Gateway. > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > -- Sergio Alvarez (506)8301342 Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
