Re: [FW-1] NG Gateway cluster issue

[Pete Sandoval <pfsandoval@FW1-NOSPAMYAHOO.COM>]

I suggest reveiwing the latest release notes for FP2.

In my conversation with CP yesterday, you MUST upgrade
to FP2 in order for clustering to work correctly. You
will probably have to relicense as well.

Good luck, you'll need it. )We've had a rough time
with it here.)

Pete Sandoval

--- andrevs <andre@CT.DDSECURITY.CO.ZA> wrote:
> Hi,
>
> I installed a Stonebeat FC cluster with two NG FP1
> nodes on solaris 8.
> Everything worked very well. I had to replace the
> second node because of
> hardware issues. The object 'node2' was already
> defined in the policy.
> So I reset the SIC and re-established the SIC. This
> worked fine. I'm
> able to attach the license to the node (using
> central licensing).
> However, when I add the node to the gateway cluster
> object, it gives me
> a popup 'Revoking certificate' window with a
> 'General error in
> Certificate Authority' message. I' able to close the
> window, and 'node2'
> is actually part of the gateway cluster then. When I
> push the policy, it
> gives me this messages: "VPN-1/FireWall-1 policy
> installation failed for
> module node2...
>  Reason: Load on module Failed - No valid FM
> license"
>
> When I reboot or restart (cpstop&&cpstart) the node,
> I get this error
> message:"Installing Security Policy defaultfilter on
> all.all@node2
> Fetching Security Policy from localhost succeeded
>  WARNING: Cannot locate my Network Object
>  Failed to read database.
>  Probably module was never installed
>  Failed to fetch policy from masters in masters file
> FireWall-1 started"
>
> I've tried to recreate the 'node2' object. I've
> tried to create a new
> object with a different name. I've tried many time
> to reset the SIC. The
> trust is always established, so I don't think it's a
> sic issue any more.
>
>
> Any help would be greatly appreciated.
>
> Cheers
> Andre'
>
> Network Security Engineer
> Dimension Data Security
> Tel: +27 21 659 2540
> Fax: +27 21 659 2195
> Email: andre@ct.ddsecurity.co.za
> Geek by nature, Unix by choice.
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================


__________________________________________________
Do You Yahoo!?
Yahoo! Health - your guide to health and wellness
http://health.yahoo.com

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================