Hello,
Thanks a lot and sorry for my late reply.

hdorsman> That is a security feature built into FW-1 so that the system
hdorsman> does not come up with unprotected interfaces.  You will need to
hdorsman> disable your startup script (S95firewall1 ?) by renaming it then
hdorsman> reboot so the fw module does not start.  Then you will need to
hdorsman> go into the firewall object in your objects list and rename the
hdorsman> interface.

Even I disable automatic start of FireWall-1/VPN-1 module at boot time
by cpconfig, I get the same error message and the OS could not boot normally.

hdorsman> Question, though, why do you want to rename your interface?

Just for configuration of a ineterface conveniently for some software.

hdorsman> I am a little confused about at what level you actually want to
hdorsman> name it.  Device level naming is done in the OS, and I am not
hdorsman> even sure if you can successfully rename it there.  The interface
hdorsman> hostname is done in /etc/hostname.<ifname> which should be pretty
hdorsman> simple.

Without Fw-1 installation in the Solaris, we can rename it by the way
which I mentioned before. The output of ifconfig -a shows the new interface
name.
BTW, AFAIK StoneBeat FullCluster can rename a interface name to sbifx
on FW-1. I intend to do the same way with them.

Best Regards,

--Wen

hdorsman> > -----Original Message-----
hdorsman> > From: Wen Guangcheng [mailto:[EMAIL PROTECTED]]
hdorsman> > Sent: Tuesday, December 17, 2002 3:24 AM
hdorsman> > To: [EMAIL PROTECTED]
hdorsman> > Subject: Re: [FW-1] How to change the name of network interface
hdorsman> >
hdorsman> >
hdorsman> > Hello nicolas figaro,
hdorsman> > Thank you so much for your reply.
hdorsman> > The fatal problem is, after rename the name of interface I
hdorsman> > could not reboot
hdorsman> > the box normally and I have to login by single user. The
hdorsman> > error message is,
hdorsman> > #-----
hdorsman> > FW-1:i/f abc0(abc0) is not fund in table (SIOCSLIFNETMASK 8078697e)
hdorsman> >           Warning: this interface is not monitored by FireWall-1
hdorsman> > FW-1 IP: FW-1has a problem registering an interface
hdorsman> > configuration command(8078697e) - blocked.
hdorsman> > #----
hdorsman> > Then stop there.
hdorsman> >
hdorsman> > Regards,
hdorsman> >
hdorsman> > --Wen
hdorsman> >
hdorsman> > ----- Original Message -----
hdorsman> > From: "nicolas figaro" <[EMAIL PROTECTED]>
hdorsman> >
hdorsman> > > you have to update the topology on the fw1 object.(simply rename the
hdorsman> > > interface).
hdorsman> > > you can boot your solaris 8, logon, do a fw unloadlocal and
hdorsman> > > push the rules from the management (with the new topology)
hdorsman> > >
hdorsman> > > nicolas figaro
hdorsman> > >
hdorsman> > > Guangcheng Wen a �crit:
hdorsman> > >
hdorsman> > > >Hello Gurus,
hdorsman> > > >I intend to change the name of a network interface in a
hdorsman> > solaris8(sparc)
hdorsman> > > >in which FW-1 NG FP3 is running, say, eri0-->abc0.
hdorsman> > > >I have tried to create a symbolic link /dev/abc to
hdorsman> > > >/devices/pseudo/clone\@0\:eri and a file /etc/hostname.abc0,
hdorsman> > > >then added "accept abc" in the file of /etc/fw.boot/ifdev.
hdorsman> > > >But unfortunately the interface could not be up after reboot.
hdorsman> > > >Does I miss something related to FW-1?
hdorsman> > > >Thanks in advance.
hdorsman> > > >
hdorsman> > > >Regards,
hdorsman> > > >
hdorsman> > > >--Wen

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to