NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [FW1] 4.1 SP0 - 4.1 SP3 upgrade on AIX 4.3.3



That was exactly the problem.  I fixed the fwstart and fwstop and everything
seems alright now.  Except for the fact that Manual IPSec appears to be
broken in SP3.  I had to upgrade to SP2 instead.. 

Many thanks to all who answered.


=====================================================================
Joseph Voisin, Systems and Network Administrator, Engel Canada Inc. 
www.engelmachinery.com | [email protected] |=====================================================================

 -----Original Message-----
From: 	Kohichiroh Watanabe [mailto:[email protected]] 
Sent:	Monday, February 05, 2001 11:49 PM
To:	[email protected]
Subject:	Re: [FW1] 4.1 SP0 - 4.1 SP3 upgrade on AIX 4.3.3





Hi,

  I found applying SP3 overwrite fwstart and fwstop script as original.
Did you check "no -o ipforwarding=x" configuration in  fwstart & fwstop
script?
  I installed Firewall-1 v4.1 Sp3 /w AIX 4.3.3 maintenance level 6 on my
RS/6k
and seems no trouble.
 It seems no problem to skip service pack in current Firewall-1 versions
but to
avoid the problem it's better install service pack in order.
 SP1 of  AIX version is inside of Checkpoint2000 CDROM.

 I found another problem in starting snmpd. in fwstart script(same in all
un*x
version),

  +264          if ($dosnmp) then
  +265                  echo 'FireWall-1: Starting snmpd'
  +266                  if ( $aix ) then
  +267                          nohup /usr/sbin/snmpd -p 260 > /dev/null
  +268                  else

  Calling snmpd using -p option but AIX's snmpd doesn't support such
option.

 regards.

/*   IBM Japan,Ltd.                           */
/*      IGS, e-Business Enablement Services / ERS-J          */
/*             Koichiro Watanabe              */


From: "Joe Voisin (FW1)" <[email protected]>@lists.us.checkpoint.com on
      2001/02/06 05:03 AM

Please respond to "Joe Voisin (FW1)" <[email protected]>

Sent by:  [email protected]


To:   "FW1 List (E-mail)" <[email protected]>
cc:
Subject:  [FW1] 4.1 SP0 - 4.1 SP3 upgrade on AIX 4.3.3




I attempted to perform the SP3 upgrade on the weekend with absolutely no
luck.  The install appeared to run fine, but nothing would work afterwards.
Encryption between sites failed.

Site A:
RS/6000 B50 / 512Mb RAM / 6 Ethernet Ports.
AIX 4.3.3.01
Checkpoint Firewall-1 4.1 SP0 (Version pre Checkpoint 2000)
Enterprise Encryption Center

Site B:
RS/6000 B50 / 512Mb RAM / 2 Ethernet Ports.
AIX 4.3.3.01
Checkpoint Firewall-1 4.1 SP0 (Version pre Checkpoint 2000)
Firewall Module

I have read that there is no way to upgrade the version of FW-1 that I have
and that I will have to uninstall it and reinstall CP 2000.

My installation method was the standard as described in the release notes.
The install goes without a hitch, it completes successfully, but nothing
works.  When I reject the update (installp -r) everything returns to normal
and communications are working.

Any Ideas?  Anyone?

According to Checkpoint (don't know why I bother to call) it should work
and
I should not have any problems... I had the same problems with SP2.

Joe

=====================================================================
Joseph Voisin, Systems and Network Administrator, Engel Canada Inc.
www.engelmachinery.com | [email protected] |=====================================================================



============================================================================
====

     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====





============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.