CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have 72 attendees signed up from 20 countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Interoperability
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-05-28
mikesjn mikesjn is offline
Junior Member
 
Join Date: 2007-04-10
Posts: 2
Rep Power: 0
mikesjn has an average reputation (10+)
Default Problems with R62 on SuperMicro 6022P-8R crashing

Software: Check Point SecurePlatform NGX (R62) Build 031

Hardware: SuperMicro 6022P-8R Dual Intel CPU 2GB Ram 2 X Onboard NIC (Intel® 82546EB Gigabit Ethernet) using the e1000 driver
These are configured as External (Internet) and DMZ interfaces.

An additional network card,
eth0 3c59x
is used for the internal network.

We have 2 of these the same, acting as FW modules and 1 smartcenter (the 2 servers are configured exactly the same) (They came over as part of a company merger and have been rebuilt)

Specification at:
Supermicro, Inc. - Products | SuperServers | 2U | 6022P-8R / 6022P-8RB


The firewall works fine for everyday use, they have been running for several months, with the usual email and web server traffic to and fronm the DMZ and all other traffic, inc downloads, ftp etc.. The company has put some new servers in the DMZ and we have to back them up from the internal network, using Legato Networker 7.2.1, we have configure the keep alives and it works fine for smaller backups. The firewall has been generally well behaved, it has frozen once whilst doing this.
We have introduced a new server that need to backup somewhere in the region of 456GB from the dmz to internal, this starts, but has never completed, it backs up at 10MBs and has got as far as 250GB. The server then freezes. There is nothing in the logs ie /var/logs or in the samrtview tracker, it just freezes and the CPU overheat warning comes on and the server is frozen so that it has to be powered off.

This happens with either of the servers are used (the company wanted a cold standby, so we just change the firewalls over, SIC and push the policy), I would like to go for failover at a later date.

We have run numerous hardware tests over days (memtest, CPU burn in,stress tests) and we can never get a fault.
During operations the top command shows negligible CPU usage ample free memory and nothing looking out of place.

Does anyone have any ideas, could this be a compatabiliy issue? I read that there are some compatibilty issues with R65 for SuperMicro servers.
Any ideas appreciated.
Reply With Quote
  #2 (permalink)  
Old 2008-05-29
mcnallym mcnallym is offline
Senior Member
 
Join Date: 2007-06-04
Posts: 993
Rep Power: 2
mcnallym has an average reputation (10+)
Default Re: Problems with R62 on SuperMicro 6022P-8R crashing

I believed that the issue was Broadcom NIC's. As you have Intel then should be fine.

R65 hFA02 also has some new e1000 drivers I beieve off the top of my head.
Reply With Quote
  #3 (permalink)  
Old 2008-06-17
mikesjn mikesjn is offline
Junior Member
 
Join Date: 2007-04-10
Posts: 2
Rep Power: 0
mikesjn has an average reputation (10+)
Default Re: Problems with R62 on SuperMicro 6022P-8R crashing

It seems to be a compatability issue. I tried 2 of the Supermicro servers and ran memtest and cpu burn in tests for days. They both did exactly the same. A Compaq DL360 G3 came spare 2 weeks ago, so I built this as the gateway. Thus far all is fine, I have run TB of backups across it with no errors, so far anyway
Reply With Quote
  #4 (permalink)  
Old 2008-06-17
cciesec2006 cciesec2006 is offline
Senior Member
 
Join Date: 2006-09-26
Posts: 696
Rep Power: 2
cciesec2006 has an average reputation (10+)
Default Re: Problems with R62 on SuperMicro 6022P-8R crashing

"An additional network card, eth0 3c59x is used for the internal network."

I would advise replacing this NIC because it does NOT very well with 802.1q,
if you have a need for 802.1q, because I've run into numerous issues with this
NIC and 802.1q in my lab environment.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 05:06.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0