NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [FW1] Sun+CPfw1+Stonebeat HA-Snoop=Interface Problem ????



Do you have state sync running between the firewalls?  FW1 can't maintain
the connections if state sync isn't running.  What connection is dropping,
your connection to the firewall where you are running the snoop?  Are you
connecting via a dedicated interface (an interface dedicated JUST to that
machine) or are you connecting to an interface controlled by Stonebeat?  If
it's the latter then your connection will always drop as your
telnet/ssh/rlogin session is to one of the specific firewalls not through
the firewall(s).

Kevin




-----Original Message-----
From: Rodrigo Borges [mailto:[email protected]]
Sent: Thursday, March 22, 2001 5:28 AM
To: [email protected]
Subject: [FW1] Sun+CPfw1+Stonebeat HA-Snoop=Interface Problem ????



Hi,

I'm installing the Stonebeat HA version 3.1 and I have the following
configuration:

Hardware:
2 Sun Servers 220R with 1 Quad cards. I use qfe0 - qfe1 to connect to our
network segments through the switches and use a cross over UTP cable to
connect the hme0 network cards together. I also use serial link between the
two Firewalls or heartbeat. The external interfaces qfe0 and qfe1 have the
same IP and MAC address on both nodes.

Software:
Solaris 2.6
CheckPoint FW-1 V4.1
StoneBeat V3.1

Problem:
When I mannualy switch from PRIMARY to SECONDARY, connectivity is lost. But
if I do a SNOOP on the interfaces before the switch everything is OK.
The same applies if I want to get back to PRIMARY from SECONDARY.

Is this a Stonebeat or an interface problem?

Have anybody saw something like this? Does it make any sense?

Rodrigo

_____________________________________________________

Rodrigo Borges

TAC Support, IC ICS IP&A
SIEMENS SA, Information & Communications 
Phone: +351 21 4242220



============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====

Attachment: Kevin Martin (E-mail).vcf
Description: Binary data



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.