RE: [FW1] Assistance Needed: Three Problems with Nokia/Checkpoint

["Gordius of Phrygia" <gordius@FW1-NOSPAMhotmail.com>]

Thanks for the reply, Paul;

> 2) I'd check the interface setups for the firewall and switch.  I have had
> loads of problems with "auto-negotiation" of speed and duplex coming up 
> with
> different settings.  Lock them down to 100Mbs/Full-Duplex if supported.


Checked.  Both sides of all three interfaces report 100/full; I'm seeing no 
error counts, either.  (I did have to "turn on" the full duplex in Voyager, 
but we did that weeks ago, with no improvement, other than collisions=>0.)

> 3) Which interface did you licence?  I have seen the "error" message saying
> "Only 25 Hosts Allowed" is just info to let you know the size of your
> licence.  But if you have licences the internal interface, I reckon it will
> count the external IPs as being protected.


The conf/cp.license file reports the IP of the interface designated in 
conf/external.if, which is indeed the external interface (the interface with 
access to lots of hosts).  And this is the interface that the IP's reported 
in the "too many internal hosts" are reachable over....


And so the mystery deepens!

Thanks anyway,
-frank

_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.



================================================================================
    To unsubscribe from this mailing list, please see the instructions at
              http://www.checkpoint.com/services/mailing.html
================================================================================