You don't need to specify the LICENSED interface.. This is incorrect. Use the interface that you want the sync to happen on. Make sure you specify BOTH interfaces in your putkey command eg: fw putkey my.local.ip.interface remote.firewall.interface and do this on both firewalls.

********************************************
Frank Darden
Senior Security Engineer
Mission Critical Systems
3320 NW 53rd St. Suite 202
Fort Lauderdale, FL 33062
voice
fax
email [email protected]
********************************************

-----Original Message-----
From: David C. Diemer [mailto:[email protected]]
Sent: Thursday, May 03, 2001 6:19 AM
To: [email protected]; [email protected]; [email protected]
Subject: RE: [FW1] Firewall-1 sync problems

Whenever you perform a putkey, make sure you specifiy the LICENSED interface

of the other machine.

David C. Diemer, CCSE
Enterprise Security Firewall Engineer
Georgia Department of Administrative Services (DOAS)
200 Piedmont Ave. SE
Suite 1420, West Tower
Atlanta, GA 30334
[email protected]
(V)
(F)

>>> "Juppunov, George" <[email protected]> 05/02/01 03:54PM >>>

You need to redo your putkey. Make sure you specify the correct interface to
putkey from
i.e. your sync interface.

George

> -----Original Message-----
> From:    benjamin.c [SMTP:[email protected]]
> Sent:    Wednesday, May 02, 2001 6:31 AM
> To:    [email protected]
> Subject:    [FW1] Firewall-1 sync problems
>
>
> hi all
>
> i am looking in the logs on our firewall cluster
> and i am seeing some trange things , this mesasge keeps
> repeating on both of the firewall modules.
>
> fwd: Peer (10.10.10.70) denies access for command sync
> fwd: Authentication with 10.10.10.70 for command sync failed
>
> what does this mean
>
> System Administrator
> http://www.Apocolips.org.uk
>
> ( ) ( ) ( ) ( ) ( )
>
>
>
> ==========================================================================
> ======
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ==========================================================================
> ======
>
>
_____________________________________________________________________
IMPORTANT NOTICES:
          This message is intended only for the addressee. Please notify the
sender by e-mail if you are not the intended recipient. If you are not the
intended recipient, you may not copy, disclose, or distribute this message
or its contents to any other person and any such actions may be unlawful.

         Banc of America Securities LLC("BAS") does not accept time
sensitive, action-oriented messages or transaction orders, including orders
to purchase or sell securities, via e-mail.

         BAS reserves the right to monitor and review the content of all
messages sent to or from this e-mail address. Messages sent to or from this
e-mail address may be stored on the BAS e-mail system.

================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================