Re: [FW-1] Mixing VLANs in Cluster

2006-09-12 Thread sin
Crist Clark wrote: I have someone at a VAR telling me they don't see a reason why this wouldn't work, but it doesn't seem to. I want to see if anyone here can give me a more firm yes or no before I pop for more hardware. I have a cluster with two nodes. The topology of both nodes lines up

Re: [FW-1] Mixing VLANs in Cluster

2006-09-12 Thread Sudarshana Edirisinghe
checkpoint does not support vlan tagged interfaces in cluster. That why u are getting intermitant errors. ( This only applies to solaris and SPLAT anyway.) Things like crossbeam, notel, nokia (UTM boxes) supports this type of config. they have a secureknoledge article explaining the issue, can't

[FW-1] Problem with R61 utm and Antivirus SMTP

2006-09-12 Thread Alvaro Gastambide
Hi, i installed Chk UTM R61 with Antivirus, but when i activate Antivirus for SMTP it block all smtp connections, and it doesn't show any drop on tracker. Anybody have this problem ? Thanks -- Saludos, Alvaro = To set vacation,

[FW-1] scratching my head over this one. Interface topology in NGx R61

2006-09-12 Thread cisco4ng
Hi, Management server:NGx R61 on Win2k3 Enterprise Server SP1 Enforcement module: IP530 with IPSO 4.1 build 16 and NGx R61 External IP:129.174.1.8/21 (129.174.1.7 is vrrp) Internal IP: 10.105.0.2/24 (10.105.0.1 is vrrp) There is a Cisco

Re: [FW-1] Mixing VLANs in Cluster

2006-09-12 Thread sin
Sudarshana Edirisinghe wrote: checkpoint does not support vlan tagged interfaces in cluster. That why u are getting intermitant errors. ( This only applies to solaris and SPLAT anyway.) Things like crossbeam, notel, nokia (UTM boxes) supports this type of config. they have a secureknoledge

[FW-1] fw log core dump on solaris

2006-09-12 Thread pkc_mls
Hi, I have a problem when running fw log on a solaris management station. when the log file is bigger than 5 Mbs, the process cores (SIGSEGV or SIGBUS). adding the -p -n options doesn't solve the problem. could anyone tell me if there is a workaround to avoid this ? I suspect a memory issue

Re: [FW-1] scratching my head over this one. Interface topology in NGx R61

2006-09-12 Thread [EMAIL PROTECTED]
Hi, Edit the cluster object - topology - edit topology - double click on the internal interface (first column) - topology - specific and asign a group to it. Kind Regards. Robby On 9/12/06, cisco4ng [EMAIL PROTECTED] wrote: Hi, Management server:NGx R61 on Win2k3 Enterprise Server

Re: [FW-1] Mixing VLANs in Cluster

2006-09-12 Thread [EMAIL PROTECTED]
Hi, What you could try: 1) first get a list of all the devices that clusterXL monitors: cphaprob [-i[a]] [-e] list Purpose: View the list of critical devices on a cluster member and of all the other machines in the cluster. 2) Then deactivate the monitoring of the two physical interfaces that

Re: [FW-1] scratching my head over this one. Interface topology in NGx R61

2006-09-12 Thread pkc_mls
cisco4ng a écrit : Hi, Once I define a checkpoint gateway object and gateway cluster object and put the gateway object into the gateway cluster object, under the topology, how can I tell the Internal interface that there is an network of 192.168.1.0/24 behind this interface as

Re: [FW-1] scratching my head over this one. Interface topology in NGx R61

2006-09-12 Thread Gary Scott
You should be able to go into the edit topo section for the cluster, mark the interface(s) as cluster and manually define the vrrp IP, you well see the topo tab for the cluster interface. The topo definition for a cluster object changed a bit from r55. -GS -Original Message- From:

Re: [FW-1] Mixing VLANs in Cluster

2006-09-12 Thread [EMAIL PROTECTED]
Solution ID: #sk10640 ClusterXL supports VLAN tagging (802.1q) from NG FP3. It is supported in every cluster configuration: Legacy High Availability, New High Availability and Load Sharing. Before that version it was not supported at all. Perhaps you should upgrade your FP3 cluster ;) Kind

Re: [FW-1] scratching my head over this one. Interface topology in NGx R61

2006-09-12 Thread cisco4ng
The thing is that the topology is already set to internal without me doing anything about it. It would not even let me edit the topology. cisco4ng pkc_mls [EMAIL PROTECTED] wrote: cisco4ng a écrit : Hi, Once I define a checkpoint gateway object and gateway cluster object and put

Re: [FW-1] scratching my head over this one. Interface topology in NGx R61

2006-09-12 Thread Lino Eduardo Avila Rodríguez
Have you checked if it's a checkpoint gateway not a checkpoint host? Cheers, lino -Original Message- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Gary Scott Sent: Martes, 12 de Septiembre de 2006 07:48 a.m. To:

Re: [FW-1] scratching my head over this one. Interface topology in NGx R61

2006-09-12 Thread pkc_mls
cisco4ng a écrit : The thing is that the topology is already set to internal without me doing anything about it. It would not even let me edit the topology. did you get the topology from the gateway or define it manually ? cisco4ng

Re: [FW-1] Mixing VLANs in Cluster

2006-09-12 Thread Sudarshana Edirisinghe
sorry, was referring to sk30720 , my cluster was on bge interfaces. sorry. sud [EMAIL PROTECTED] wrote: Solution ID: #sk10640 ClusterXL supports VLAN tagging (802.1q) from NG FP3. It is supported in every cluster configuration: Legacy High Availability, New High Availability and Load

Re: [FW-1] installing Performance Pack after HFA installation

2006-09-12 Thread Juan Concepcion
Yes, there is a file that needs to be replaced on the blade in order to do this. Juan On Tue, 2006-09-12 at 11:42 -0400, Juan Concepcion wrote: Yes, there is a file that needs to be replaced in order to do this. Juan On Mon, 2006-09-11 at 09:40 -0500, Hoff, Chris

Re: [FW-1] scratching my head over this one. Interface topology in NGx R61

2006-09-12 Thread Gary Scott
If you mark the interface as private then you can change the topology per interface. Once you mark cluster you can no longer define the topo per interface, it must be defined per the cluster interface. This is done from the edit menu of the topo for the cluster object. Are you unable to edit

Re: [FW-1] Mixing VLANs in Cluster

2006-09-12 Thread Crist Clark
On 9/12/2006 at 6:01 AM, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Hi, What you could try: 1) first get a list of all the devices that clusterXL monitors: cphaprob [-i[a]] [-e] list Purpose: View the list of critical devices on a cluster member and of all the other machines in the