Re: [FW-1] RAID on SecurePlatform

[Gary Ellis <GEllis@FW1-NOSPAMICN1.COM>]

Title: Message

Mea Culpa. Right after I wrote this I stumbled on the "right" combination. Basically, SecurePlatform appears to grab one of the drives in the array and install itself on it, breaking any config you previously set up.

 

To make this work I simply removed one of the drives prior to setting SecurePlatform up then once everything was working, added the second drive and established the mirror. Simple, and everything still works.

 

Gary  

 

 -----Original Message-----
From: Gary Ellis
Sent: Tuesday, February 18, 2003 2:13 PM
To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
Subject: [FW-1] RAID on SecurePlatform

Hi,

I'm building a SecurePlatform (FP3 Edn2) setup on a Compaq ML310 (ATA Version).  I had hoped to use the integrated LSI Logic Megaraid adapter to mirror across a pair of drives, but of course the SecurePlatform distribution doesn't have a driver for it, although perversely one *is* listed for the SCSI version of this controller.

Neither does there seem to be an obvious way of enabling the software RAID built into Linux, even from "expert" mode. That said, the /etc/rc.d/rc.sysinit file does have some stuff that’s looking for /etc/raidtab.

I did read a NG post from June last year that implied that Check Point didn't think that hardware fault tolerance was important for a SecurePlatform because you can roll a new one very quickly and push the policy down from the management server.  This philosophy is fine, right up to the point where the box is deployed using a single gateway license and you lose your drive. What happens to the logs in that scenario?  They get lost right?  Of course theres a whole raft of other problems too. Suffice it to say that it isn't a no-data-loss 10 minute recovery.

So… can anyone help me out with how to make RAID work in this setup?

Thanks,

Gary I Ellis, CCSE(4.0/NG), MCSE(NT4.0/W2K), CCNA, CCDA
Senior Technical Staff, Innovative Computing and Networking, Somerset, NJ
Tel:  Fax:  gellis@icn1.com