kernel: FW-1: Warning: Interface eth-s2p2c0 is defined but not currently present

[nooon]

[SOLVED by Northlandboy]


I try to setup a new interface

got this :
kernel: FW-1: Warning: Interface eth-s2p2c0 is defined but not currently present

In ifconfig, the interface show up correctly (up, connected, vrrp ok, etc)

But in "fw ctl iflist" the interface does not show up either :(.

What can I do to fix this ? The interface is working correctly at electric level (tcpdump -i eth-s2p2c0 shows some traffic, I get ARP entries on this interface, etc)

When "Get interfaces" from mgmt station, this interface does NOT appear. wtf ?

Enforcement fw ver
This is Check Point VPN-1(TM) & FireWall-1(R) NG Feature Pack 3 Build 537001004

Mgmt fw ver :
NG FP3 Build 53945

EDIT
IPSO hostblabla 3.6-FCS6 releng 1061 01.21.2003-230310 i386 quite old I know :(

[northlandboy]

If you're not running ifwd, and you're using pre-R54, you need to do a cpstop;cpstart for the interface to show up.

[rayden69]

Sounds like you may not have defined the interface in the firewall object topology. Until it is there Checkpoint won't be able to allow traffic through it.

[nooon]

@northlandboy : Thanks mate, Im gonna try this.
Strange thing is that the backup enf. module, running same versions, does not have the problem. Anyway, a cpstopstart will maybe help.

@rayden69 : Thanks for your reply. Interfaces topology was defined ;-)

[nooon]

@northlandboy : oki now it works, thanks for bringing me onto the good road !
I basically enabled IFWD, then made a ifconfig down/up onto the concerned interface, and it worked. Just killed IFWD afterwards because it's bad (c).

THANKS !

[northlandboy]

Good to hear. Another reason to upgrade - you shouldn't need to worry about this sort of stuff with newer code.