CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 Platforms > Linux
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-08-08
Junior Member
 
Join Date: 2006-08-03
Posts: 5
Rep Power: 0
dharris has an average reputation (10+)
Default what the?

Hi guys

I have a customer who has an R60 cluster setup.

he is running 2 dell boxes, 1 D2000 and 1 D2800. both have 2 x quad cards.

SPLAT configured the interface names so it looks like this:

firewall A firewall B
eth3 eth0
eth4 eth1
eth7 eth5
eth8 eth6
eth11 eth9
eth12 eth10
eth14 eth12
eth15 eth13
eth16
eth17

is this some kind of splat bug? why in heck does it not number them sequentially? it makes for some serious confusion. I wasnt there for the install so i'm not sure if the admin did anything strange during that time.

he has configured them so the number of clustered interfaces match up.

to make things worse
firewall b is the primary, he cannot fail over to A it just crashes with no real clues from cphaprob

he is also running private addressing on the real external interfaces with a public address on the cluster. routing looks ok. theres no port security on the external switch
Reply With Quote
  #2 (permalink)  
Old 2006-08-10
Senior Member
 
Join Date: 2006-04-30
Location: Europe, Germany
Posts: 151
Rep Power: 3
dsb.nepo has an average reputation (10+)
Default Re: what the?

just a suggestion,

2x 2 quad card = 16 eth

- put all cards during install at box 1 16 x eth + internal
- remove card 1 and 3, now you have 8 eth + internal but the ethXX are not renumbered (linux problem?)
maybe only swap the cards in the slot.

At the 1st install the firewall object was created and then at the topology tab a get interfaces was done (with all cards).
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 06:39.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0