Hi Thanks for this, lesson learnt here, well hope so Going to install 3.8 and see how that goes cheers
cisco4ng <[EMAIL PROTECTED]> wrote: This is my 2c: 1) you should be running IPSO 3.7.1 build 024. It is a very stable ipso version. Is there a reason why you would want to run IPSO 3.8 or IPSO 3.9? 2) you should be running R55w with HFA_04 on IPSO3.7.1 build 24 for the reason that R55w is very close to NGx and it is also a very stable version as well. Furthermore, you can use the same NG FP3 license on NG AI R55w. Contact me offline if you need additional help. I am, by no mean, an expert with Nokia and IPSO but I am managing about 500 Nokia appliances here at work. cisco4ng Gary Scott wrote: I don't think IPSO 3.9 supports r55 only NGX. 3.8 you needed r55p. -GS -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Peter Addy Sent: Thursday, June 01, 2006 4:03 PM To: [email protected] Subject: [FW-1] HELP PLEASE !!!!! Running Nokia IPSO 3.9 and Checkpoint NGAI R55 Hi Please help! ,this is a live environment without redundancy ! Previous configuration Nokia IPSO 3.6 and Checkpoint FP3 Upgraded to IPSO 3.9 and NGAI R55, HAF_17 performing "new install" running both on Nokia IP740 Upgrade went fine on one device however when coming to failover this would not take effect, downed quite a few interfaces on primary to failover but no VRRP advertisements seen on Secondary ???? "cpstop" on primary does not perform failover to secondary ?? Also looking at the CPHA doing cphaprob stat this shows one active and one down on both modules. After disabling an interface on the primary the command "sh vrrp " just shows 1 less interface in master state ???? Decided to upgrade primary to IPSO 3.6 and NGAI R55, thinking this would resolve the problem. Disabled VRRP preempt mode on both Nokias and tested failover, still not working and both devices went into backup, help !!! Managed to get the primary back to master by turning the "firewall monitor" off in the VRRP section in voyager, checked the Checkpoint policy and all seems ok, pushed policy ok, selecting cluster device as NGAI. current status primary as master and secondary as backup, failover not working and no idea why cpha shows one active and one down? VRRP all checked, is their fundamentally something wrong here, i'm i missing something !! has anyone come across this before? Your help is most appreciated Thanks __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= --------------------------------- Yahoo! Messenger with Voice. PC-to-Phone calls for ridiculously low rates. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
