Nortel director going down frequently

[bravobritto]

Hi all ,

Here at my site we are having NSF 6416 with Checkpoint AI R55. We have configured the firewall module in cluster. And these days it is noted that one of the firewall director goes down frequently. Say thrice in a month.

Since the firewall is redundant it doesn't affect the network. And interestingly we have noted that it's the same director which goes down frequently.

When using web based management it shows that the director is down ( red color ). Then we use console to connect to the director and reboot that. This resolves the issue.

But it happens frequently, that is the point of worry. Hence we need to find why this goes down frequently.

Is this a Checkpoint issue ?

Or is it a cluster configuration issue ?

Or is it hardware issue ? We suspect hardware issue only. But we don't know how to isolate or troubleshoot this. If any logs required pl. let me know. can anyone help me ..

[bravobritto]

Hi all,

Pl. find the logs when the director went down last time:

PHP Code:

Aug  4 22:14:47 a192-168-5-4 cfgd[5994]: ERROR: Error exception during cfgd [pipe()]
Aug  4 22:14:47 a192-168-5-4 cfgd[5994]: ERROR: CFGD_031 : cfgd exiting abnormally
Aug  4 22:14:49 a192-168-5-4 hc: ERROR: Module: Check Point Firewall-1 is not running
Aug  4 22:14:49 a192-168-5-4 hc: INFO: ModuleName:Check Point Firewall-1 HCReq:Yes Interval:60 (in seconds) StopTraffic:Yes NoOfAttempts:1 LogReq:Yes RestartISD:No CurStatus:Not running 
Aug  4 22:14:50 a192-168-5-4 hc: ERROR: Exception in module: cfgd
Aug  4 22:14:50 a192-168-5-4 hc: INFO: ModuleName:cfgd HCReq:Yes Interval:60 (in seconds) StopTraffic:No NoOfAttempts:1 LogReq:Yes RestartISD:No CurStatus:Running 
Aug  4 22:14:50 a192-168-5-4 hc: ERROR: Exception in module: clicbd
Aug  4 22:14:50 a192-168-5-4 hc: INFO: ModuleName:clicbd HCReq:Yes Interval:60 (in seconds) StopTraffic:No NoOfAttempts:1 LogReq:Yes RestartISD:No CurStatus:Running 
Aug  4 22:14:50 a192-168-5-4 hc: ERROR: Exception in module: naap2d
Aug  4 22:14:50 a192-168-5-4 hc: INFO: ModuleName:naap2d HCReq:Yes Interval:60 (in seconds) StopTraffic:No NoOfAttempts:1 LogReq:Yes RestartISD:No CurStatus:Running 
Aug  4 22:14:51 a192-168-5-4 hc: ERROR: Error exception in Report_status [pipe()] 


can anyone suggest me what could be the problem ???

Regards
Britto

[mcnallym]

I don't believe that the Nortel is that widely used a platform, you are probably best off logging a call with your official check point/nortel support people.

Even in distribution I haven't come across many people that know the Nortel ASF well. I had to upgrade one to NGX once however I ended up basically reentering the config from scratch as couldn't find anythhing regarding doing an upgrade.

[bravobritto]

Thanks for your reply. Since our support with Nortel/Checkpoint has expired, I posted my problem here.

If you could suggest any other forums were I could get reply for NSF, it would be of great help.

[ngsud]

I think i am late on this , what the OS version you are running with .

[bravobritto]

Not too late. Still the problem exists.

FYI the OS version in NSF is 4.1.3.0_R55.

Thanks and Regards
Britto

[ngsud]

I was also running 4.1.3 but R60 , there was memory leak with RTM so they gave the HFA_05 , i don;t know whether its HFA_19 in ur case .

[bravobritto]

Is it possibl to download the HA from Checkpoint without having a technical support profile ?


Regards
Britto

[Sidney]

Nope, you need a valid account and support service to get HFAs.

Sidney

[bravobritto]

Thanks

Regards
Britto