NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[FW-1] NG on IPSO 3.4.2 on IP530


  • To: [email protected]
  • Subject: [FW-1] NG on IPSO 3.4.2 on IP530
  • From: Aeon Hale <[email protected]>
  • Date: Thu, 7 Mar 2002 16:13:46 -0500
  • Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
  • Sender: Mailing list for discussion of Firewall-1 <[email protected]>
  • Thread-index: AcHGHPi6wqNEmz1nSiuohGqcQrvvhg==
  • Thread-topic: NG on IPSO 3.4.2 on IP530

what's goin on all.  I just finished setting up 2 nokia 530s with HA
running CP NG FP1.  Management station is Win2k on Dell.  Both machines
work fine, High availability works fine.  There are two things that
bother me.  The major one is that on the second nokia box (the
secondary) it takes a very long time to push policy.  In fact, if I
leave the system status window open, it says its disconnected for a
short time, then connected again after teh policy actually gets to the
box.  The other nokia works fine.  Also, when I console or telnet to the
second nokia box and just run a FW command like fw stat, it takes
forever.  It's definately slower than the NOKIA1.

Second issue is that it was told that when do a netstat -na i should see
established connections between the link port for the state sync.  But i
do not see this.  I ran fw tab -t connections -s and the id and amount
of connections is the same so that would tell me that they are in sync,
but the connection doesn't show up in the netstat.  When i run cpconfig,
i have an option to start "Checkpoint HA/State sync"....this is not
running.  Is it supposed to?  I didn't think it needed to be since i
wasn't using checkpoint for HA, but nokia.  Please let me know if i'm
doing this wrong.

Thanks in advance...

Aeon

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.