Hi,
yes i actually had the message "cluster. member.. " and i did solved with
resolutionid 16562 but the error in cluster is still present. i dont know
if actually is there any problem with ipso 3.8 and CP NG FP3. It seems
there is a problem when cluster IP translates packets(DBD packets) to host
IP and then error "bad unicast destination detected" appears on FW log so
ospf state is stuck in EXSTART.
any further idea is wellcome... thanks a lot.
Eduardo
----------- Mensaje Original --------------
De: Hill, Lindsay, VF-NZ [Lindsay.Hill AT VODAFONE DOT COM]
Para: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
[FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM]
Cc:
Asunto: Re: [FW-1] OSPF problem with IPSO 3.8
Fecha: 24/03/2005 01:10:36
Mensaje:
You're not seeing messages like "cluster member IP is being spoofed" are
you? Could be tied into/similar to:
https://support.nokia.com/knowledge/resolutionView.jsp?ResolutionId=1652
1
Fix is to run: modzap _fw_ttl_check $FWDIR/boot/modules/fwmod.o 0x0
I've seen a similar issue with 3.7/FP3 and R55
Also, I thought that for IPSO 3.8 you had to run R55p. I didn't think
you could use FP3 on 3.8
- LH
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of
edlobo AT cantv DOT net
Sent: Thursday, 24 March 2005 7:37 a.m.
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1] OSPF problem with IPSO 3.8
HI,
I have a doupt and i would like someone to tell me if there is any bug
or misfunctioning for a Ipso Cluster running Ipso 3.8.1 build 28/ FP3
and OSPF routing. The problem is i have running OSPF in the cluster
toward other ipso box, but the state i've seen in FW interface is
EXSTART, so by looking at the FW logs i have seen an error "Bad unicast
destination detected" over incoming packets from the external ipso box.
Does any one knows why my FW does not receive DB desrciption packets and
it remains in state EXSTART, so the FULL state in OPSF may not be
reached.
Thanks for any idea or comments
Rgds
Elobo
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
----------------------------------------------------------------------------
-------------------
Have you seen our website?.... http://www.vodafone.co.nz
Manage Your Account, check your Vodafone Mail and send web2TXT online:
http://www.vodafone.co.nz/myvodafone
CAUTION: This correspondence is confidential and intended for the named
recipient(s) only.
If you are not the named recipient and receive this correspondence in
error, you must not copy,
distribute or take any action in reliance on it and you should delete it
from your system and
notify the sender immediately. Thank you.
Unless otherwise stated, any views or opinions expressed are solely those
of the author and do
not represent those of Vodafone New Zealand Limited.
Vodafone New Zealand Limited
21 Pitt Street, Private Bag 92161, Auckland, 1020, New Zealand
Telephone + 64 9 357 5100
Facsimile + 64 9 377 0962
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
