Firewall-1

Re: [FW-1] OSPF problem with IPSO 3.8

Subject: Re: [FW-1] OSPF problem with IPSO 3.8
From: "edlobo AT cantv DOT net" <edlobo AT CANTV DOT NET>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Thu, 24 Mar 2005 10:06:50 -0400
Yes, i did have the rules for mcast packets, in fact hello packets actually
arrives to hosts, the thing is DBD packets are not getting to cluster.
Traces show me packets come to floating IP but then it seems a bug when
translating the floating IP to node 1 IP and thus showing the error ad
unicast destination detected.
rgs
Eduardo

----------- Mensaje Original --------------

De: ravi pina [ravi AT COW DOT ORG]
Para: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
[FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM]
Cc:
Asunto: Re: [FW-1] OSPF problem with IPSO 3.8
Fecha: 23/03/2005 23:53:46
Mensaje:

have you tried putinig an explicit rule at the top
that allows anyone to go to the ospf mcast nets* and
the fw modules for service ospf (proto 89)?

-r

* OSPFIGP.all.routers   224.0.0.5
  OSPFIGP.dr            224.0.0.6
  MCAST.all.routers     224.0.0.2



On Wed, Mar 23, 2005 at 03:37:04PM -0400, edlobo AT cantv DOT net said at one
point in time:
> HI,
>
>  I have a doupt and i would like someone to tell me if there is any bug or
> misfunctioning for a Ipso Cluster running Ipso 3.8.1 build 28/ FP3 and
OSPF
> routing. The problem is i have running OSPF in the cluster toward other
> ipso box, but the state i've seen in FW interface is EXSTART, so by
looking
> at the FW logs i have seen an error "Bad unicast destination detected"
over
> incoming packets from the external ipso box. Does any one knows why my FW
> does not receive DB desrciption packets and it remains in state EXSTART,
> so the FULL state in OPSF may not be reached.
>
>
> Thanks for any idea or comments
>
> Rgds
>
> Elobo
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================

--

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>