Firewall-1

Re: [FW-1] VLAN change = no longer reachable

Subject: Re: [FW-1] VLAN change = no longer reachable
From: Scott Tobias <stobias14 AT GMAIL DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Wed, 21 Mar 2007 13:31:13 -0400
Was this a VRRP cluster ? If are you using simplified VRRP ? Do you enable
Virtual Address in OSPF config ?



On 3/21/07, Paolo Riviello www.paoloriviello.com <pao_rivi AT hotmail DOT com>
wrote:

Obviously you better delete and recreate del logical interface by the CLI
,
in my expertise on nokia the voyager is not the best way to configure.

cheers

--

Paolo Riviello

Home: http://www.paoloriviello.com
E-mail: paolo AT paoloriviello DOT com
E-mail & msn: pao_rivi AT hotmail DOT com
Skype: pao_rivi

If men could get pregnant, abortion would be a sacrament. -H-






>From: "Paolo Riviello www.paoloriviello.com" <pao_rivi AT HOTMAIL DOT COM>
>Reply-To: Mailing list for discussion of Firewall-1
><FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
>To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
>Subject: Re: [FW-1] VLAN change = no longer reachable
>Date: Wed, 21 Mar 2007 11:13:07 +0100
>
>take a look to the topology in smartcenter view....
>
>
>
>--
>
>Paolo Riviello
>
>
>Home: http://www.paoloriviello.com
>E-mail: paolo AT paoloriviello DOT com
>E-mail & msn: pao_rivi AT hotmail DOT com
>Skype: pao_rivi
>
>If men could get pregnant, abortion would be a sacrament. -H-
>
>... aspetto che il panico cresca, quando la paura si tramuta in visioni
>celestiali inizio a staccare ...
>-Schwantz-
>
>
>
>
>
>>From: "David CALLEBAUT [AEMS Be]" <david.callebaut AT AEMS DOT NET>
>>Reply-To: Mailing list for discussion of Firewall-1
>><FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
>>To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
>>Subject: [FW-1] VLAN change = no longer reachable
>>Date: Wed, 21 Mar 2007 07:19:49 +0100
>>
>>Dear listmembers,
>>
>>Did anybody ever encountered this:
>>
>>Gateway is a CP NG w. AI R55 with latest HFA on a Nokia IP 530 with
>>3.8.1-BUILD033.
>>
>>A physical interface is configured to have 2 logical IP's using VLAN
>>tagging.
>>Both interfaces were re-distributed in OSPF to our backbone routers
>>(through another interface).
>>Requested by the switching team we needed to change the VLAN number on 1
>>of those interfaces.
>>So I simply changed the VLAN number in the interface configuration
>>(through voyager), applied and saved.
>>The VLAN changed ok since I could ping a machine from the gateway on
>>that (changed) VLAN.
>>However the interface was no longer distributed in OSPF. On our core
>>routers the route was gone.
>>In the tracker we saw no unusual drops (except from the packets being
>>routed to an incorrect gateway).
>>Turning off the logical interface and turning back on did not change
>>anything.
>>Turning off the redistribution in OSPF and back on: no change.
>>
>>So we did a rollback to the previous VLAN... But the route does not
>>return anymore...
>>During all this no policy push was done.
>>
>>Now we have created a static route on our core routers, but this is a
>>situation that is not wanted..
>>
>>Did anyone ever run in the same issue? Should I remove the interface
>>completely instead of simply changing the VLAN number?
>>Any help would be great!
>>
>>David C.
>>
>>=================================================
>>To set vacation, Out-Of-Office, or away messages,
>>send an email to LISTSERV AT amadeus.us.checkpoint DOT com
>>in the BODY of the email add:
>>set fw-1-mailinglist nomail
>>=================================================
>>To unsubscribe from this mailing list,
>>please see the instructions at
>>http://www.checkpoint.com/services/mailing.html
>>=================================================
>>If you have any questions on how to change your
>>subscription options, email
>>fw-1-owner AT ts.checkpoint DOT com
>>=================================================
>
>_________________________________________________________________
>Windows Live OneCare: tutto per la cura del tuo PC ! Provalo Gratis!
>http://onecare.live.com/standard/it-it/default.htm
>
>=================================================
>To set vacation, Out-Of-Office, or away messages,
>send an email to LISTSERV AT amadeus.us.checkpoint DOT com
>in the BODY of the email add:
>set fw-1-mailinglist nomail
>=================================================
>To unsubscribe from this mailing list,
>please see the instructions at
>http://www.checkpoint.com/services/mailing.html
>=================================================
>If you have any questions on how to change your
>subscription options, email
>fw-1-owner AT ts.checkpoint DOT com
>=================================================

_________________________________________________________________
Windows Live OneCare: tutto per la cura del tuo PC ! Provalo Gratis!
http://onecare.live.com/standard/it-it/default.htm

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================


=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>