Sparc Solaris 10 kernel panic

[htsguru]

For those hopeful of using lastest/greatest...

New Machine
Sun Fire V210
Fresh install (both end user -or- entire distribution)
Sparc Solaris 10 01/06 release
plus Patch Cluster (same result without)
Solaris 10_Recommended Jan-18-06

only setup interfaces
bge0,bge1,bge2,bge3 configured

Fresh install Check Point Express:
NGX R60 VPN-1 Pro/Express package for Solaris 10
fw1_591000462_1.tgz 11-Oct-2005

After install, reboot...
Panic[cpu0]/thread = 3000eed900: fw_dlnext: State Handler Error

Probably works with earlier version of Solaris 10, but haven't found available via web anymore.

[intehnet]

hmm not sure.. you're not running it within a slave zone on solaris 10 are you??

[htsguru]

No zones - no hardening - just out-of-the-box solaris 10 install.

V210 has bge 4 port interface on motherboard.

Trying to figure out if bge is the problem.

[jonyb]

had the same problem with solaris 10 on v210 and cp ngx. it works with ce cards but not with the builtin bge cards.

did you manage to make it work with the bge cards?

[mmoret]

Maybe you need to comment out some interfaces in /etc/fw.boot/ifdev
I commented out all accept interfaces which I know I do not use.
That did the trick on Solaris 9

Regards
Martijn
<server># cat ifdev
# network I/F device description file
# all known FireWall-able interfaces should be listed below
# (lines beginning with a '#' followed by a space are ignored)
# Format:
# <i/f device> <deny/accept (DLPI fastpath request)>
#
# DLPI fastpath should be denied unless it is known that FireWall-1
# functions well in this mode with the particular type of interface

#le accept
#be accept
#qe accept
qfe accept
#hme accept
pelx deny
nf deny
tr deny
qaa deny
fa deny

elx deny
iee deny
iprb deny
pcn deny
eepro deny

ipdptp deny

#ge accept
ci deny
plex deny
#eri accept
#dmfe accept
#ce accept
#skge accept
ba deny
bge accept
#lane accept
#sppp accept

[jgillespie]

I've got the same setup, V210, Solaris 10 (01/06) and installing NGX R60 VPN-1 Pro/Express package for Solaris 10. Reboot after install produces the output below. Has anyone gotten this to work on a Solaris 10? My current firewall runs on a V210 (just like this box) with Solaris 8 and R55.

---Screen Output-----

Rebooting with command: boot
Boot device: /pci@1c,600000/scsi@2/disk@0,0:a File and args:
SunOS Release 5.10 Version Generic_118822-25 64-bit
Copyright 1983-2005 Sun Microsystems, Inc. All rights reserved.
Use is subject to license terms.
Hardware watchdog enabled
FW-1: driver installed

panic[cpu0]/thread=300017adc80: fw_dlnext: State Handler Error

000002a1008049e0 fw:fw_dlnext+1d0c (4000, 3000164c530, 3000164c530, 0, 30001252258, 3000313fce8)
%l0-3: 000000007c5956b0 000000007c595770 000003000164c530 000000007c5957b8
%l4-7: 000000007c57c2c2 0000000000000800 00000000701d0140 0000000000000030
000002a100804ab0 fw:fwstrmodrput+ab8 (3000164c530, 30003133e00, 2a100800000, 13c70800, 0, 3000129a600)
%l0-3: 000003000129a670 0000000000000000 000003000129a600 0000000000000083
%l4-7: 0000000000000050 000003000129a6c0 000003000164c530 0000030002f1c028
000002a100804bc0 unix:putnext+218 (3000164c720, 3000164c530, 30003133e00, 100, 3000164c7c0, 0)
%l0-3: 0000000000000000 0000000000000000 0000000000000000 0000000000004c70
%l4-7: 000000000000010d 00000000701d0080 000000007c008610 fffffd5eff800000
000002a100804c70 dld:proto_bind_req+1dc (1, 800, 30003133e00, 0, 0, 2)
%l0-3: 0000000000000006 000003000164c8b8 0000030003137ec0 0000000000000003
%l4-7: 0000000000000008 0000000000000006 00000300000b102c 0000000000000002
000002a100804d40 dld:dld_wput+fc (30003137f70, 30003133e00, 3000129a600, 1, 30003137ea8, 3000125fd40)
%l0-3: 000003000164c8b8 0000000000000000 0000000000000000 00000000701d0af0
%l4-7: 00000000701d0af8 0000000000000000 00000000701d0ad8 0000000000000001
000002a100804df0 unix:putnext+218 (3000164c9b0, 3000164c8b8, 30003133e00, 100, 3000164c628, 0)
%l0-3: 0000000000000000 0000000000000000 0000000000000000 0000000000004ea0
%l4-7: 000000000000010d 000003000172e9e8 0000000001321188 fffffd5eff800000
000002a100804ea0 fw:fwstrmodwput+b18 (3000164c628, 30003133e00, 2a100800000, 0, 1860000, 0)
%l0-3: 000003000129a670 0000000000000100 0000030003133e00 00000000701d0058
%l4-7: 0000000000000000 0000000000000001 0000000000000000 0000000000000001
000002a100804f50 unix:putnext+218 (3000164c720, 3000164c628, 30003133e00, 100, 3000164c398, 0)
%l0-3: 0000000000000000 0000000000000000 0000000000000000 0000000000005000
%l4-7: 000000000000010d 00000000701d00d0 000000007c00a554 fffffd5eff800000
000002a100805000 ip:ill_dl_phys+240 (30000398c68, 30001707288, 30003133f40, 0, 0, 30003133dc0)
%l0-3: 0000030003133e00 000003000129e6c0 0000030003133e80 0000000000000000
%l4-7: 0000000000000000 0000030003133e40 000000007002a800 0000000000000000
000002a1008050b0 ip:ipif_set_values_tail+38 (30000398c68, 30001707288, 30003133f40, 3000164c398, 30000398e58, 30001606de0)
%l0-3: 00000300017adc80 000000007002d400 000000000183e800 0000000000000001
%l4-7: 0000000000000001 0000000000000002 0000000000000002 0000000000000001
000002a100805160 ip:ipif_set_values+43c (3000164c398, 30003133f40, 30001313c30, 30001313c50, 30001606de0, 96)
%l0-3: 0000030000398c68 0000000000000000 0000000000000000 0000000000000001
%l4-7: 00000000c0786981 00000000c0786800 0000000002000000 0000030001707288
000002a100805220 ip:ip_process_ioctl+3f8 (3000164c398, 30003133f40, 1, 7002c1c8, 0, 0)
%l0-3: 0000030001606de0 0000030001707288 0000000080786999 000000008078699a
%l4-7: 000000008078699b 0000000000000002 0000000080786800 0000000000000001
000002a100805320 unix:putnext+218 (3000164c490, 3000164c398, 30003133f40, 100, 3000164c108, 0)
%l0-3: 0000000000000000 0000000000000000 0000000000000000 00000000000053d0
%l4-7: 000000000000010d 000000007002cd50 000000007be2041c fffffd5eff800000
000002a1008053d0 unix:putnext+218 (30001251e08, 3000164c108, 30003133f40, 0, 3000164cb48, 0)
%l0-3: 0000000000000000 0000000000000000 0000000000000000 0000000000005480
%l4-7: 000000000000010d 0000000070000370 000000000132b770 fffffd5eff800000
000002a100805480 genunix:strdoioctl+7bc (3000124af08, 2a1008058a0, 0, 30003133f40, 3a98, 1)
%l0-3: 000003000124af90 ffffffffffffffff 0000000000000c50 000003000124af88
%l4-7: 0000000000000000 0000000000000001 00000300012eb768 0000000000000000
000002a100805580 genunix:strioctl+12d8 (3000124af08, 2a1008058c8, 7400, 5000, 2a100805adc, 30000375b58)
%l0-3: 000000000000fc00 0000000000006b00 0000000000000000 0000000000000001
%l4-7: 0000030001cbaa80 ffffffffc0786981 0000000000100003 000003000164ca50
000002a1008058d0 specfs:spec_ioctl+8c (ca000003e9, ffffffffc0786981, 60b80, 100003, 30000375b58, 2a100805adc)
%l0-3: 00000000000000ca 00000000ffffffff 00000000000000ca ffffffffffffffff
%l4-7: 00000300015fba30 000000007045e208 0000030001ce95e0 0000030001cbaa80
000002a100805990 genunix:ioctl+184 (4, 30001234ba0, 60b80, 60a98, 0, ffffffffc0786981)
%l0-3: 000003000171d3b0 000003000171d3d0 0000000000000004 0000000000000001
%l4-7: 000003000171d3d0 0000000000000000 0000000000000000 0000000000000000

[mmoret]

I will give it try to install Checkpoint R60 on Solaris 10 after the weekend, see if I can reproduce the problem.

Regards
Martijn

[mikebgn]

I was on the phone with Checkpoint regarding another issue and they mentioned this was a 'Sun issue' (of course) and that Sun was developing a patch, which is not yet released.

[jgillespie]

I installed Solaris 10 released 03/05, checkpoint install and works fine. I've opened a support case with Sun to figure out what happened between 03/05 and 01/06. I'll post anything I find out.

[ffrancis]

Hi all,

Installed checkpoint NGX-61 on solaris 10 03/05 no problem.
Then tried to install the updates of solaris with smpatch update.
And guess what it crashed also same error message as with NGX-60

Regards
Filip

[chillyjim]

I'm told this works with R61 as well as R60. sk31772

[jgillespie]

An official patch has been released from Sun to fix this problem. I have not tested it yet, but if anybody needs it:

Patch # 118833-23