CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
2. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
3. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 Platforms > Check Point VPN-1 Edge Appliances
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-11-27
fwguy fwguy is offline
Junior Member
 
Join Date: 2006-11-27
Posts: 2
Rep Power: 0
fwguy has an average reputation (10+)
Default Edge X16 IP Conflict

I have 100+ Firewalls is various locations and every so often I am unable to connect to the PC's behind the FW due to an IP Conflict in the event log. 2 VPN appliances show up in the "Active Computers" view with the same MAC address. I have contacted sofaware to no avail. I hope that maybe you guys could give me a hand with it. Firmware 5.0.92X ( it appears that the problems happen on this firmware) I have upgraded the firmware remotely but it didn't help. I have removed the VPN (Site to site) and it didn't help. I normally build a new one and ship it out. I receive the broken one back and after a reset and a new config it works.

Please let me know if anyone has experienced this and if there is anything I do remotely to fix it.

Thanks,
Reply With Quote
  #2 (permalink)  
Old 2006-11-27
RayPesek RayPesek is offline
Senior Member
 
Join Date: 2006-03-19
Location: Northern Ohio
Posts: 891
Rep Power: 3
RayPesek has an average reputation (10+)
Default Re: Edge X16 IP Conflict

Have you ever written down the MAC addresses to see if there is any correlation to anything? I'm wondering if the same MAC address keeps showing up over and over regardless of the appliance.

Ray
Reply With Quote
  #3 (permalink)  
Old 2006-11-27
fwguy fwguy is offline
Junior Member
 
Join Date: 2006-11-27
Posts: 2
Rep Power: 0
fwguy has an average reputation (10+)
Default Re: Edge X16 IP Conflict

Thanks for the reply Ray,

AFAIK, they show 1 number off from the WAN MAC on the FW. I haven't seen the same MAC between different FW's.

WAN MAC on the FW
xx:xx:xx:xx:xx:40

"Active computers tab"

VPN-1 Edge xx.xx.xx.1
xx:xx:xx:xx:xx:3e

xx.xx.xx.1
xx:xx:xx:xx:xx:3e

I checked a couple of other FWs and they show the difference but there is only 1 VPN-Edge MAC in the active computers tab. Instead of the 2 I show here.
Reply With Quote
  #4 (permalink)  
Old 2006-11-28
RayPesek RayPesek is offline
Senior Member
 
Join Date: 2006-03-19
Location: Northern Ohio
Posts: 891
Rep Power: 3
RayPesek has an average reputation (10+)
Default Re: Edge X16 IP Conflict

I'm confused. Doesn't Active Computers just show what's connected to the LAN interfaces of the Edge? It's been awhile since I looked, though.

Ray
Reply With Quote
  #5 (permalink)  
Old 2006-12-19
SnAp227 SnAp227 is offline
Junior Member
 
Join Date: 2006-12-19
Posts: 6
Rep Power: 0
SnAp227 has an average reputation (10+)
Default Re: Edge X16 IP Conflict

Quote:
Originally Posted by RayPesek View Post
I'm confused. Doesn't Active Computers just show what's connected to the LAN interfaces of the Edge? It's been awhile since I looked, though.
Yes. Only LAN/DMZ (or wan2) interfaces are shown on the active computers section.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 20:17.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0