[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] slow network connection to slave firewall

To: [email protected]
Subject: Re: [FW-1] slow network connection to slave firewall
From: Trung Nguyen <[email protected]>
Date: Mon, 30 Dec 2002 17:58:12 -0800
In-Reply-To: <8AF1544349A828419C96A6D248249D4902AF9F57@quebec>
Reply-To: Mailing list for discussion of Firewall-1 <[email protected]>
Sender: Mailing list for discussion of Firewall-1 <[email protected]>

Aaron,

We are running StoneBeat HA and I got that problem
before. Do not know why but it did fixed mine.

Regards,

Trung Nguyen
--- "<Aaron Reynolds>"
<[email protected]> wrote:
> Just out of curiosity, have you run into this
> before?  Any idea what this
> will do?  Thanks for your help.
>
> -Aaron
>
> -----Original Message-----
> From: Trung Nguyen [mailto:[email protected]]
> Sent: Monday, December 30, 2002 4:54 PM
> To: [email protected]
> Subject: Re: [FW-1] slow network connection to slave
> firewall
>
>
> Aaron,
>
> Just try:
>
> (1) Switch the Secondary online (i.e: Primary will
> go
> offline)
> (2) Switch the Primary back online (i.e: Secondary
> will go offline)
> (3) Try SSH again.
>
> Regards,
>
> Trung Nguyen
>
> --- "<Aaron Reynolds>"
> <[email protected]> wrote:
> > This has happened twice now, that I have noticed.
> > Once on Dec 18, for about
> > 2 hours, and once today (Dec. 30) for about 1-2
> > hours.  The problem is as
> > follows:
> >
> > IPSO 3.5 FCS8 / 4.1 SP6 (HA pair)
> >
> > Policy pushing and fetching fail on the secondary,
> > but work on primary.
> > User database updates fail, but work on primary.
> > However, FW1 logging to
> > management console seems to continue through the
> > problem. ssh connections
> > take up to 2 minutes for a password prompt to come
> > back, and then once
> > authentication is entered, sometimes timeout,
> never
> > getting a prompt.  Once
> > logged into the box, things are very slow.  "ls"
> > commands will hang for a
> > few seconds, sometimes you wait for typing, as if
> on
> > a serial connection.
> > Here is the strange thing.  I see no collisions on
> > the firewall or next hop
> > switch on our LAN. Load is about 2% on the
> firewall.
> >  There is next to no
> > traffic. Meanwhile, my primary firewall is working
> > fine, taking all the
> > load.  ssh connections are quick, getting
> immediate
> > responses.  This rules
> > out a problem with a router/switch on our LAN.  It
> > seems to be either the
> > firewall, or the next hop switch inside the
> > firewall. I tried rebooting the
> > firewall as a last resort, and it didn't fix
> > anything.  Then, in both cases
> > it will just start working again without me doing
> > anything.  Any help is
> > greatly appreciated.  Let me know if you need more
> > info.  Thanks.
> >
> > -Aaron
> >
> > =================================================
> > To set vacation, Out Of Office, or away messages,
> > send an email to [email protected]
> > in the BODY of the email add:
> > set fw-1-mailinglist nomail
> > =================================================
> > To unsubscribe from this mailing list,
> > please see the instructions at
> > http://www.checkpoint.com/services/mailing.html
> > =================================================
> > If you have any questions on how to change your
> > subscription options, email
> > [email protected]
> > =================================================
>
>
> __________________________________________________
> Do you Yahoo!?
> Yahoo! Mail Plus - Powerful. Affordable. Sign up
> now.
> http://mailplus.yahoo.com
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================


__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

References:
- Re: [FW-1] slow network connection to slave firewall
  - From: "<Aaron Reynolds>" <[email protected]>

Prev by Date: Re: [FW-1] slow network connection to slave firewall
Next by Date: Re: [FW-1] Problem with Expired License
Prev by thread: Re: [FW-1] slow network connection to slave firewall
Next by thread: Re: [FW-1] slow network connection to slave firewall
Index(es):
- Date
- Thread