[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] RE: [FW1] Problems with FW 4.1 SP 3
We found it necessary to lock in each UTP interface on our various sun systems running Solaris 2.6 in order to get sufficient throughput. Autonegotiate did not cut it. Some were locked at 100FD, others at 10HD, but in every case when we matched up the locked-in bridge settings with the I/F settings, errors dropped to nothing and throughput was correctly much better. The commands to set this up were provided by Sun as follows: # set hme0 to 100mb/s fdx ndd -set /dev/hme instance 0 ndd -set /dev/hme adv_100T4_cap 0 ndd -set /dev/hme adv_100fdx_cap 1 ndd -set /dev/hme adv_100hdx_cap 0 ndd -set /dev/hme adv_10fdx_cap 0 ndd -set /dev/hme adv_10hdx_cap 0 ndd -set /dev/hme adv_autoneg_cap 0 # set hme1 to 10mb/s hdx ndd -set /dev/hme instance 1 ndd -set /dev/hme adv_100T4_cap 0 ndd -set /dev/hme adv_100fdx_cap 0 ndd -set /dev/hme adv_100hdx_cap 0 ndd -set /dev/hme adv_10fdx_cap 0 ndd -set /dev/hme adv_10hdx_cap 1 ndd -set /dev/hme adv_autoneg_cap 0 We put this into /etc/init.d/net-tune and linked it to /etc/rc2.d/S95net-tune. Of course each system had its own requirements for each interface, but these two possibilities covered them all, adjusted for the proper instance. Just in case you haven't done this sort of thing before, you can display the current parameters for each interface by using the appropriate set instance command above, then running each of the above commands without either the "-set" or the final parameter. I've no idea whether this is appropriate for any other interface type. -----Original Message----- From: Loesch, John [mailto:[email protected]] Sent: Monday, March 19, 2001 12:10 PM To: 'Newsmaster' Cc: [email protected] Subject: RE: [FW1] Problems with FW 4.1 SP 3 I once saw something like this on another box where the network interface was set to autonegotiate speed. When there wasn't a network connection, there was nothing to negotiate with and it never got set. The interface card would, however, keep checking every so many minutes and retry the negotiation. While the negotiation was going on, everything (including the mouse) would freeze up just a couple of seconds. Just a thought... -----Original Message----- From: Newsmaster [mailto:[email protected]] Sent: Monday, March 19, 2001 5:48 AM To: [email protected] Subject: [FW1] Problems with FW 4.1 SP 3 Hi. We have an 4.1 FW with SP 3 installed on Solaris 2.6 It has 54 rules and 83 translations. Recently we are having troubles with this firewall: It gets frozen every 1 2 or 3 minutes for a seconds, an then continues working ok. The machine is not loaded, it has processor and memory enough. We have changed the machine an the problems continues. We have tested the network an the Catalyst, and it's ok. Whe have testet with two firewalls: the same machine, the same OS and the same FW started, one is managing connections, a lot, an the other not. The problem is in the FW working and not in the other FW. I think there is a problem in FW 4.1 software. Whe have monitorized th machine and it seems desn't have problems at all: load is ok, memory ok, disk ok, etc. Any idea? Is 4.1 stable enough to work ok in hard conditions? Any bug? Any help? We had a lot of troubles in our working due this problem. Hoping answers (Please) Adolfo Ranero Serrano -([email protected])------------------------------------------------------- -- ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|