[FW-1] Need help with sync.conf

[Jed Stafford <jedsta@FW1-NOSPAMHOTMAIL.COM>]

I'm trying to get state syncro working between two Checkpoint NG firewalls with FP1 installed.

FW1(1) has an IP of 192.168.1.101

FW1(2) has an IP of 192.168.1.103

Each FW has a sync.conf file with one line in it, the IP address of the other FW. I've issued the following command on each FW 'fw putkey -n localIP remoteIP'.

I've changed the rules on each firewall to allow all connections to all services. I can ping each box from the other fine.

When I peform a 'netstat -an | grep 256' on a box I get '0.0.0.0.0:256   0.0.0.0:* LISTEN'

in the /FWDIR/log/fwd.elg log file I do get the entry 'fwsync: failed to read cluster sync mode!' when I start up, but I cannot find *anything* anywhere which remotely explains what that means. Also i've tried using a packet sniffer which I admit i'm a little rusty with so I might be missing something, but it does not look like it is trying to send sync. packets.

Any sage advice on what I might be missing?

-Jed

 

---

MSN Photos is the easiest way to share and print your photos: Click Here

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================