what is the purpose of the /etc/sysconfig/ethtab file in NGx

[cciesec2006]

What is the purpose of this file in NGx? I would like to find out more
information about it but I have no luck so far, even with checkpoint
secure knowledgebase which I have CSP support.

Thanks.

[chillyjim]

Its how you change the order of the interfaces in SPLAT. Its in sk31788

[cciesec2006]

Hi chillyjim,

I looked in Checkpoint knowledgebase and I have expert access. Still
I can not find the sk31788 that you referred to. Can you post the solution
here please? Thanks.

[chillyjim]

I can't do that as it's in violation of the license but I can tell you what to do to rearrange the interfaces

***Use at your own risk***

Do this from a console connection!!

1. Ifdown all interfaces
2. with sysconfig remove all IP addresses on the interfaces to be changed
3. edit /etc/sysconfig/ethtab and arrange the mac addresses on the interfaces you want them
4. run alloc_ethnames. Ignore "Connection add failed" messages
5. reboot
6. use sysconfig to reassign ip addresses and routes as needed.

[cciesec2006]

Hi,
I am not asking that you post the solution here. Sorry for the
confusion. Just want to confirm that sk31788 is the right sk.

Can you confirm it? Thanks.

[chillyjim]

Yes it is. It shows up as requiring advanced access. Not sure what that maps to.

[RayPesek]

Originally Posted by chillyjim

I can't do that as it's in violation of the license but I can tell you what to do to rearrange the interfaces

***Use at your own risk***

Do this from a console connection!!

1. Ifdown all interfaces
2. with sysconfig remove all IP addresses on the interfaces to be changed
3. edit /etc/sysconfig/ethtab and arrange the mac addresses on the interfaces you want them
4. run alloc_ethnames. Ignore "Connection add failed" messages
5. reboot
6. use sysconfig to reassign ip addresses and routes as needed.

Hi Jim,

Are all of those steps needed? "Forcing order of NICs - sk33859" seems to say that all you need to do is edit the file.

Thanks,

Ray

[chillyjim]

It was how I was told to do it and it works.
You could try to just edit the file and reboot, it might work.

[RayPesek]

Yeah, and it might not, eh? :-)

Thanks,

Ray

[cciesec2006]

Jim,

I am getting conflicting information. According to Checkpoint
Secure Knowledgebase sk33859 , this thing is fixed in NGx R60.

so I don't know what to believe.