NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [FW1] Problems with FW 4.1 SP 3



We found it necessary to lock in each UTP interface on our various sun
systems running Solaris 2.6 in order to get sufficient throughput.
Autonegotiate did not cut it. Some were locked at 100FD, others at 10HD, but
in every case when we matched up the locked-in bridge settings with the I/F
settings, errors dropped to nothing and throughput was correctly much
better.

The commands to set this up were provided by Sun as follows:

# set hme0 to 100mb/s fdx
ndd -set /dev/hme instance 0
ndd -set /dev/hme adv_100T4_cap 0
ndd -set /dev/hme adv_100fdx_cap 1
ndd -set /dev/hme adv_100hdx_cap 0
ndd -set /dev/hme adv_10fdx_cap 0
ndd -set /dev/hme adv_10hdx_cap 0
ndd -set /dev/hme adv_autoneg_cap 0

# set hme1 to 10mb/s hdx
ndd -set /dev/hme instance 1
ndd -set /dev/hme adv_100T4_cap 0
ndd -set /dev/hme adv_100fdx_cap 0
ndd -set /dev/hme adv_100hdx_cap 0
ndd -set /dev/hme adv_10fdx_cap 0
ndd -set /dev/hme adv_10hdx_cap 1
ndd -set /dev/hme adv_autoneg_cap 0

We put this into /etc/init.d/net-tune and linked it to
/etc/rc2.d/S95net-tune. Of course each system had its own requirements for
each interface, but these two possibilities covered them all, adjusted for
the proper instance.

Just in case you haven't done this sort of thing before, you can display the
current parameters for each interface by using the appropriate set instance
command above, then running each of the above commands without either the
"-set" or the final parameter.

I've no idea whether this is appropriate for any other interface type.

-----Original Message-----
From: Loesch, John [mailto:[email protected]]
Sent: Monday, March 19, 2001 12:10 PM
To: 'Newsmaster'
Cc: [email protected]
Subject: RE: [FW1] Problems with FW 4.1 SP 3



I once saw something like this on another box where the network interface
was set to autonegotiate speed.  When there wasn't a network connection,
there was nothing to negotiate with and it never got set.  The interface
card would, however, keep checking every so many minutes and retry the
negotiation.  While the negotiation was going on, everything (including the
mouse) would freeze up just a couple of seconds.  Just a thought...

-----Original Message-----
From: Newsmaster [mailto:[email protected]]
Sent: Monday, March 19, 2001 5:48 AM
To: [email protected]
Subject: [FW1] Problems with FW 4.1 SP 3



	
	Hi.

	We have an 4.1 FW with SP 3 installed on Solaris 2.6

	It has 54 rules and 83 translations. Recently we are having
troubles with this firewall: It gets frozen every 1 2 or 3 minutes for a
seconds, an then continues working ok. The machine is not loaded, it has
processor and memory enough. We have changed the machine an the problems
continues. We have tested the network an the Catalyst, and it's ok. Whe
have testet with two firewalls: the same machine, the same OS and the same
FW started, one is managing connections, a lot, an the other not. The
problem is in the FW working and not in the other FW. I think there is a
problem in FW 4.1 software. Whe have monitorized th machine and it seems
desn't have problems at all: load is ok, memory ok, disk ok, etc.

	Any idea? Is 4.1 stable enough to work ok in hard conditions? Any
bug? Any help? 

	We had a lot of troubles in our working due this problem.

	Hoping answers (Please)

	Adolfo Ranero Serrano


-([email protected])-------------------------------------------------------
--




============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.