Firewall-1

Re: [FW-1] Bge interfaces on Sun V240

Subject: Re: [FW-1] Bge interfaces on Sun V240
From: Steve Butterfield <steve.butterfield AT PCS.CO DOT UK>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Mon, 22 Nov 2004 16:29:16 +0000
You need to edit /etc/system:

set nstrpush=16
set nautopush=64

Best Regards

Steve Butterfield



On Mon, 2004-11-22 at 13:49, Aiggno wrote:
> Hi all,
>
> I install Checkpoint R55W to my Sun V240 server. It seems that the
> Checkpoint do not accept the bge interfaces on the V240. I did add the bge
> accept to the fw.boot/ifdev already. Below is the log:
>
> SunOS Release 5.8 Version Generic_117350-02 64-bit Copyright 1983-2003 Sun
> Microsystems, Inc.  All rights reserved.
> Hardware watchdog enabled
> FireWall-1 boot security configuration:
> FW-1: Disabling IP forwarding
> FW-1: Loading default filter
> FW-1: driver installed
> FW-1: Default filter installed successfully
> FW-1: Loading I/F device list: le qe qfe hme ipdptp ge eri ce bge sppp
> FW-1: Starting bootd: fwbootd: child pid=21
> FW-1: Autopushing under UDP
> FW-1: Autopushing over network interface drivers
> FW-1: Autopushing over le
> FW-1: Autopushing over qe
> FW-1: Autopushing over qfe
> FW-1: Autopushing over hme
> FW-1: Autopushing over ipdptp
> FW-1: Autopushing over ge
> FW-1: Autopushing over eri
> FW-1: Autopushing over ce
> FW-1: Autopushing over bge
> ap: ioctl failed: Out of stream resources
> FW-1: bge autopush failed: resetting ...
> Usage:
>         ap -a drv minor last-minor mod [mod ...]
>
>         add:    last-minor = 0 means one and not range
>                 minor = -1 means all
>
>
>         ap -r drv minor
>
>         remove: minor should be in range (0 for all)
>
>
>         ap -g drv minor [ place    mod [mod ...]]
>
>         get:    minor should be in range (0 for all)
>                 prints arguments for add command
>                 place specifies where to insert mod
>
>
>         See also autopush(1M)
>
>
>         Other options:
>
>         ap -e drv mod
>         query:  check if mod is already autopushed over drv
>
> ap -g: ioctl failed (0): No such device
> FW-1: Autopushing over sppp
> ap: ioctl failed: Out of stream resources
> FW-1: sppp autopush failed: resetting ...
> Usage:
>         ap -a drv minor last-minor mod [mod ...]
>
>         add:    last-minor = 0 means one and not range
>                 minor = -1 means all
>
>
>         ap -r drv minor
>
>         remove: minor should be in range (0 for all)
>
>
>         ap -g drv minor [ place    mod [mod ...]]
>
>         get:    minor should be in range (0 for all)
>                 prints arguments for add command
>                 place specifies where to insert mod
>
>
>         See also autopush(1M)
>
>
>         Other options:
>
>         ap -e drv mod
>         query:  check if mod is already autopushed over drv
>
> ap -g: ioctl failed (0): No such device
> configuring IPv4 interfaces:FW-1: i/f bge0 (bge0) is not found in table
> (SIOCSLIFNETMASK 8078697e)
>       Warning: this interface is not monitored by FireWall-1
> FW-1 IP: FW-1 has a problem registering an interface configuration
>          command (8078697e) - blocked.
> NOTICE: bge0: link down
>
> Do anyone see that error ? Please help.
> Best regards,
> Aiggno
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================
--
*---------------------------------*---------------------------------*
| Productivity Computer Solutions | Steve Butterfield               |
| Complex 7, Wakefield Road,      | Technical Director              |
| Ossett, West Yorks,             | Phone: (+44) 1924 281777        |
| WF5 9AJ, England                | Fax:   (+44) 1924 215311        |
|                                 | Email: steveb AT pcs.co DOT uk         |
| ** Making Ideas Reality **      | http://www.pcs.co.uk            |
*---------------------------------*---------------------------------*

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>