NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [FW1] Checkpoint HA configuration



Its always those little things that get you. ;-)

--Michael


-----Original Message-----
From: [email protected] [mailto:[email protected]]
Sent: Saturday, September 23, 2000 12:23 AM
To: [email protected]
Cc: [email protected]
Subject: RE: [FW1] Checkpoint HA configuration



Yup I had TCP sync.  Below that though I had an error in the Firewall peer
address.  After correcting my oversight they were fine.  TCP address was not
right... So it wouldn't sync.

eric.

On Wed, 20 September 2000, Michael Hernandez wrote:

> 
> By the way I also ment to ask you in your sync.conf file do you have it
> setup for
> 
> SyncMode=TCP sync
> 
> --Michael
> 
> 
> -----Original Message-----
> From: eric [mailto:[email protected]]
> Sent: Tuesday, September 19, 2000 5:11 PM
> To: 'Michael Hernandez'; 'fw-1-mailinglist@lists. us. checkpoint. com
> (E-mail)'
> Cc: 'Alex Naples'; 'David Hove'; 'Chuck Orde'; 'Chris Trautwein'
> Subject: RE: [FW1] Checkpoint HA configuration
> 
> 
> The cphaprob -i -e list returns:
> 
> Registered devices:
> Device name: sync & filter
> Resitration number: 0
> Timeout: none
> Current state: initializing
> Time since last report: 961.1 sec
> 
> Device name: fwd
> Registration number: 1
> Timeout: 2 sec
> Current state: ok
> Time since last report: 0.5 sec
> 
> The cphaprob -a if returns
> 
> that hme0 is up (secured) this is the one linking the other module.  It is
> all running on solaris 7.  Each Ultra10 has the hme0 port secured and the
> remaining ports are on a Quad card and I mirrored the macs/ip as
described.
> The management server is a sparcstation 5 and all can ping each other.
> 
> Is there any decent docs on this?  I tried following the ones Checkpoint
> provides but they are pretty vague.  Thanks in advance.
> 
> eric.
> 
> -----Original Message-----
> From: [email protected]
> [mailto:[email protected]]On Behalf Of
> Michael Hernandez
> Sent: Tuesday, September 19, 2000 9:33 AM
> To: 'eric'; 'fw-1-mailinglist@lists. us. checkpoint. com (E-mail)'
> Cc: Alex Naples; David Hove; Chuck Orde; Chris Trautwein
> Subject: RE: [FW1] Checkpoint HA configuration
> 
> 
> 
> Have you tried doing the cphaprob -i -e list this way you can see your
> registered devices which allows you to see the Device name that your cpcha
> is registered to and the state in which the device is in and last time it
> was reported.
> 
> Reason im asking is if your cpha is registered to fwd, you might want to
> kill -HUP and see if the state changes.
> Also you might want to make sure you run your cphaprob -a if and make sure
> your interfaces are secured and talking.
> 
> --Hope this helps
> --Michael
> 
> 
> -----Original Message-----
> From: eric [mailto:[email protected]]
> Sent: Tuesday, September 19, 2000 2:01 AM
> To: 'fw-1-mailinglist@lists. us. checkpoint. com (E-mail)'
> Subject: [FW1] Checkpoint HA configuration
> 
> 
> 
> Gurus,
> 
> Hello.  I am having some trouble with Checkpoint's HA.  I set everything
up
> and it seems to follow the recommended config.  But, when I perform a
> cphaprob state it shows as one active and one in initializing mode.  Never
> seems to change.  Any hints on this or documentation someone can point me
> to?
> 
> eric.
> 
> 
> 
>
============================================================================
> ====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
>
============================================================================
> ====
> 
> 
>
============================================================================
> ====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
>
============================================================================
> ====




============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents � 2003 Network Presence, LLC. All rights reserved.