| |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW-1] [LOG_INFO] kernel: netlog:eth-s1p2 .. Link is UP but the link int egrity test is failing
- To: [email protected]
- Subject: Re: [FW-1] [LOG_INFO] kernel: netlog:eth-s1p2 .. Link is UP but the link int egrity test is failing
- From: Mauricio Munoz <[email protected]>
- Date: Wed, 2 Jul 2003 17:39:48 -0500
- Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
- Sender: Mailing list for discussion of Firewall-1 <[email protected]>
Well, you could review the connections (using fw tab -t connections -s)
and review if there is a large amount. By default, CPFW-1 support 25000
connections. It do not seem related with the error message, but regarding
the behavior, it sounds like if it is the problem.
I hope this helps.
====================================
Mauricio F. Muñoz Quevedo
Security Consultant
Etek International - Colombia
ISO 9001 certified
Tel: +57-( 1)-257-1520
Fax: +57-(1)-257-6960
www.etek.com.co
Este correo y cualquier archivo anexo son confidenciales y para uso
exclusivo de la persona o entidad de destino. Esta comunicación puede
contener información protegida por el privilegio de cliente-abogado. Si
usted ha recibido este correo por error, equivocacion u omisión queda
estrictamente prohibido la utilización, copia, reimpresión, reenvio o
cualquier acción tomada sobre este email y puede ser penalizada legalmente.
En tal caso, favor notificar en forma inmediata al remitente.
This e-mail and any files transmitted with it are for the sole use of the
intended recipient(s) and may contain confidential and privileged
information. If you are not the intended recipient, please contact the
sender by reply e-mail and destroy all copies of the original message. Any
unauthorized review, use, disclosure, dissemination, forwarding, printing
or copying of this email or any action taken in reliance on this e-mail is
strictly prohibited and may be unlawful.
==============================================
|---------+-------------------------------------------->
| | [email protected] |
| | Sent by: Mailing list for |
| | discussion of Firewall-1 |
| | <[email protected]|
| | KPOINT.COM> |
| | |
| | |
| | 02/07/2003 04:22 p.m. |
| | Please respond to Mailing list |
| | for discussion of Firewall-1 |
| | |
|---------+-------------------------------------------->
>----------------------------------------------------------------------------------------------|
| |
| To: [email protected] |
| cc: |
| Subject: [FW-1] [LOG_INFO] kernel: netlog:eth-s1p2 .. Link is UP but the link int |
| egrity test is failing |
>----------------------------------------------------------------------------------------------|
My backup HA firewall (IP650- IPSO 3.5 FCS8/4.1 SP6) becomes
semi-unresponsive about once every other month. Today, it happened just
after a power outage. It still logs to the master, but you can't push a
policy to it. There is noticable latency when you ssh into it. It is NOT
a
DNS issue, as this is turned off. For the first time, an error has showed
up in the /var/log/messages file:
Jul 2 14:47:43 x [LOG_INFO] kernel: netlog:eth-s1p2 .. Link is UP
but
the link integrity test is failing
Here is the strange thing. I failed the master to the backup, all traffic
was flowing normally. I then failed back, and tried to push a policy, and
it pushed to the backup HA firewall, and the latency is gone. I saw
someone
else post this back in June of 2002 without any follow-up. Any ideas would
be greatly appreciated.
-Aaron
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
|
|
