Re: [FW1] Nokia: Possible serious bug in IPSO Voyager interface.

[Rogue Bolo <roguebolo@FW1-NOSPAMyahoo.com>]

Using Voyager to add static routes is not a generally
reliable mechanism. I suggest that you use the
addstatic utility which is available from the support
site. It lets you import a flat file of static routes
and correctly inserts them into the configuration
database. If you are extremely careful, you can
manually edit the active.db and initial.db files to
add static routes. If this is not done properly the
routes will not stick. Voyager should not be relied
upon for detail of static route information, rather
the show routes from iclid.

--- Cristian Nicolae <cristian.nicolae@chello.at>
wrote:
> 
> Scott,
> I am running the same version of IPSO and once I had
> a situation similar
> to yours.
> I have about 12 static routes configured on the box.
> 
> Once it happened to me that one was lost. 
> As it only happened to me once I didn't payed too
> much attention.
> One lesson I learned from then was to look very
> carefully at the static
> routing table after a new static route is added and
> afterwards saved in
> Voyager.
> 
> Have you static routes disspeared after the routing
> table was changed
> somehow in Nokia
> (add or remove a route)?
> 
> Cristian
> 
> 
> 
> 
> "McMeekin, Scott" wrote:
> > 
> > Hi,
> > 
> > I am unable to reproduce this problem, but it's
> happened twice now and it's
> > causing real concern. Has anyone else who is
> running Nokia firewalls ever
> > experienced an inexplicable loss of a variable
> number of static routes? I'm
> > using F-secure ssh v1.0 and Netscape Navigator to
> securely forward the http
> > Voyager interface to an IP440 running IPSO 3.2.1.
> > 
> > What happened was at some point in the last couple
> of days I've been using
> > the voyager interface to look at a few things (no
> changes were made). Today
> > I get a call to say some connectivity has been
> lost, and on checking various
> > routing tables in other routers, certain routes
> appeared to have vanished. I
> > checked the firewall and Lo and Behold, 15 static
> routes (which get
> > redistributed internally) had vanished! After the
> initial scratching of
> > heads, I restored the IPSO backup and all was
> well, however this a serious
> > enough occurance to merit immediate and thorough
> investigation.
> > 
> > Anyone experienced this before I go wading into
> the support channels?
> > 
> > Many thanks,
> > 
> > Scott.
> > 
> > The Royal Bank of Scotland plc is registered in
> Scotland No 90312. Registered Office: 36 St Andrew
> Square, Edinburgh EH2 2YB.
> > 
> > The Royal Bank of Scotland plc is regulated by
> IMRO, SFA and Personal Investment Authority.
> > 
> > This e-mail message is confidential and for use by
> the addressee only.  If the message is received by
> anyone other than the addressee, please return the
> message to the sender by replying to it and then
> delete the message from your computer.
> > 
> > 'Internet e-mails are not necessarily secure. The
> Royal Bank of Scotland plc does not accept
> responsibility for changes made to this message
> after it was sent.'
> > 
> >
>
================================================================================
> >      To unsubscribe from this mailing list, please
> see the instructions at
> >               
> http://www.checkpoint.com/services/mailing.html
> >
>
================================================================================
> 
> 
>
================================================================================
>      To unsubscribe from this mailing list, please
> see the instructions at
>               
> http://www.checkpoint.com/services/mailing.html
>
================================================================================


__________________________________________________
Do You Yahoo!?
Yahoo! Messenger - Talk while you surf!  It's FREE.
http://im.yahoo.com/


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================