I would:
- enable SNMP bandwidth monitor on all NICs
- enable logging on every rule of your policies
- check the response time of NIC your having problems with.
Try sending big ICMP packages (to your physical IP, not the virtual IP);
there was this time when we had a defective NIC; changed it, and
voila... problem solved.
note:
since you are using VRRP, isn't this trafic normal because this firewall
might the master at the moment? (just wondering)
regards,
miguel
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of Michael
Robare
Sent: Thursday, May 26, 2005 2:49 PM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1] Nokia IP500 Management HTTP Slowness/Lag
Hi All - I don't remember if I ever posted this question or not.
We have two Nokia IP500's running software release: 3.6FCS6 and
ver:1061-2003
I don't know much about these boxes (a consultant install) - just enough
to be dangerous.
They are configured in VRRP failover.
The issue/symptom is this -
We use HTTP to management the boxes.
Access to the Primary is no problem. The screens come up in a matter
of seconds.
The problem is the Secondary - it takes many seconds sometimes minutes
to get bring up a screen.
Any ideas on this - aside, of course, from the normal cable/port duplex
and speed settings.
Thank you
Mike Robare
Network Admin.
Fuji Photo Film
914-789-8628
For PC HelpDesk: x:7999
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
