| |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW-1] Comm. between Mgmt-Console and fw-1-modul via redirector
First. On the firewall enforcement module -->
fw putkey <ipaddressofmgmt>
<type in key>
<confirm key>
fwstop
fwstart
Second. On management station (I am assuming NT) -->
remove "remote module"
add "remote module"
<type in key>
<confirm key>
accept restart of firewall service
Test. Use netstat -an or policy download to verify connectivity between the
two. If it still does not work, repeat enforcement module steps above one
more time and test. This almost always works for me.
If this still does not work, there are files you can remove and start from
scratch. Do it on the enforcement point. You will want to verify this
before trying as I am recalling from memory and have not had to do it in a
long time.
in $FWDIR/conf directory rename all files contaning "auth" and "key" in
them.
in $FWDIR/database (i forget the exact name of the directory) do the
same.
stop and start the firewall service
do the fw putkey thing
stop and start the firewall service again.
----- Original Message -----
From: "Ralf Hanl" <[email protected]>
To: <[email protected]>
Sent: Monday, April 29, 2002 12:26 PM
Subject: [FW-1] Comm. between Mgmt-Console and fw-1-modul via redirector
> I want to connect our management module to the firewall-1 module via a
> linux-maschine (2 NICs) with xinetd as redirector.
> I think I only need the TCP-Ports 256,257,258 to get the communication up
> and work.
>
> But I still have a problem with the communication. When installion the
> policy, the management module says:
>
> Downloading Security Policy /etc/fw/conf/Standard.pf to gatekeeper1
> Authentication for command load failed
> Failed to Download Security Policy on gatekeeper1: Unauthorized action
> Installing Security Policy on gatekeeper1 failed
>
> I think, I have a problem with the putkey command and the master file, or
> something like that.
>
> The firewallconzept we use looks like that, we cannot use NAT, because
there
> are applications which do not support it:
>
>
> Internet
> I
> fw1
> I
> HUB
> official IPs I
> ---------------- Proxy
> rfc IPs I
> HUB
> I
> fw1
> I
> Management Module
>
> Thanks a lot in advance
>
> b.r.
>
> Ralf Hanl
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
|
|
