From: Naoki Takasu [mailto:[email protected]]
Sent: 19 May 2002 03:13
To: [email protected]
Subject: [FW-1] State syncronization
Hello all,
I'm working with 2 FW-1 NG FP1 on Solaris 8. One machine has a
management station and a FW-1 module installed, and the other has a FW-1
module installed. The management station manages both FW-1 modules.
I'm trying to syncronize those FW-1 modules' state, but no communication
via port 256 is seen, so they don't seem to communicate each other. I
have configured below:
a. Both FW-1 modules have the same security policy.
b. The time of both machines is syncronized with NTP.
c. $FWDIR/conf/sync.conf lists an IP address of the other FW-1 modules.
I wonder I must install the management station and the FW-1 module on
different machines. Does anybody have any idea?
Thank you,
Naoki Takasu
[email protected]