CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Clustering (Security Gateway HA and ClusterXL)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-11-26
Junior Member
 
Join Date: 2007-09-27
Posts: 1
Rep Power: 0
grimkin has an average reputation (10+)
Default Cluster errors after upgrade

HI all,

I have 2 x Nokia IP350s which are now running IPSO 4.2 - build051 hfa02 and NGX R62 - clustered using Nokia IP clustering.

After upgrading the IPSO to 4.2 I now have masses of errors showing up in the messages log on both machines (though there are more in the primary than the secondary):

[LOG_CRIT] kernel: FW-1: fwscv_hold_expire: failed to unhold chain

Services are currently working fine but as this is a live cluster I have not been able to test failover and I fear this may be an issue with the failover mechanism.

I cannot find any information on this at all on the net or in SK .. does anyone have any tips?
Reply With Quote
  #2 (permalink)  
Old 2008-10-14
Junior Member
 
Join Date: 2008-04-10
Posts: 11
Rep Power: 0
Noidea has an average reputation (10+)
Default Re: Cluster errors after upgrade

Dear,

I have the same issue on a R60 hfa_05 / Solaris
We do not know when this message started....

fw: [ID 783286 kern.notice] FW-1: fwscv_hold_expire: failed to unhold chain


So any news is helpful...

Thanks

fwscv_hold_expire
Reply With Quote
  #3 (permalink)  
Old 2008-10-14
Senior Member
 
Join Date: 2008-07-31
Location: Netherlands, Europe
Posts: 252
Rep Power: 1
msjouw has an average reputation (10+)
Default Re: Cluster errors after upgrade

Nokia does tell you much about 4.2 on the IP350 but we have experienced the weirdest things with 4.2 and went back to 4.1 for all 260, 350, 380 and 560 models. The boxes run 4.1 very stable while we had boxes crash, when it started once a week and after 3 weeks it moved to a 3 days max uptime.

We even sent that box back to Nokia, but never heard back from them, we just got an RMA box, they had looked at 3 crash dumps and had us make some tweaks.
__________________
Regards, Maarten.
P1 R62 IPSO SPLAT IOS
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 11:57.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0