Re: [FW-1] Need help with sync.conf

Subject: Re: [FW-1] Need help with sync.conf

Date: Sun, 17 Feb 2002 11:14:02 +0200

Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>

Sender: Mailing list for discussion of Firewall-1 <[email protected]>

Hi,

The NG version works a little different than the 4.1 version in regard to synchronization, in the NG version, just configure the cluster values and the sync will occur.

Gil

-----Original Message-----
From: Jed Stafford [mailto:[email protected]]
Sent: Saturday, February 16, 2002 10:34 PM
To: [email protected]
Subject: [FW-1] Need help with sync.conf

I'm trying to get state syncro working between two Checkpoint NG firewalls with FP1 installed.

FW1(1) has an IP of 192.168.1.101

FW1(2) has an IP of 192.168.1.103

Each FW has a sync.conf file with one line in it, the IP address of the other FW. I've issued the following command on each FW 'fw putkey -n localIP remoteIP'.

I've changed the rules on each firewall to allow all connections to all services. I can ping each box from the other fine.

When I peform a 'netstat -an | grep 256' on a box I get '0.0.0.0.0:256 0.0.0.0:* LISTEN'

in the /FWDIR/log/fwd.elg log file I do get the entry 'fwsync: failed to read cluster sync mode!' when I start up, but I cannot find *anything* anywhere which remotely explains what that means. Also i've tried using a packet sniffer which I admit i'm a little rusty with so I might be missing something, but it does not look like it is trying to send sync. packets.

Any sage advice on what I might be missing?

-Jed

MSN Photos is the easiest way to share and print your photos: Click Here
================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================

**************************************************************************************************
The contents of this email and any attachments are confidential.
It is intended for the named recipient(s) only.
If you have received this email in error please notify the system manager or  the
sender immediately and do not disclose the contents to any one or make copies.

** eSafe scanned this email for viruses, vandals and malicious content **
**************************************************************************************************