CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it yet again - That's right, the 3rd edition is here!
You can read his announcement post here.
It's a massive upgrade focusing on current versions, and well worth checking out. -E

 

Results 1 to 7 of 7

Thread: NIC Connection Hangs on Power-1 9070

  1. #1
    Join Date
    2008-09-10
    Posts
    4
    Rep Power
    0

    Default NIC Connection Hangs on Power-1 9070

    We experience since yesterday strange behaviours on our Power-1 9070 Cluster.
    It can happens that all connections are cutted of and the NIC loses the link. Strange is that at this time the Passiv Firewall Node does not take over. The same happens on the other node if this one is the active one.
    So i dont think it is a hardware issue.

    We then found some strange Log entries in the /var/log/messages:
    Dec 9 08:14:12 xxx kernel: e1000: Lan1: e1000_clean_tx_irq: Detected Tx Unit Hang
    Dec 9 08:14:12 xxx kernel: Tx Queue <0>
    Dec 9 08:14:12 xxx kernel: TDH <81>
    Dec 9 08:14:12 xxx kernel: TDT <81>
    Dec 9 08:14:12 xxx kernel: next_to_use <81>
    Dec 9 08:14:12 xxx kernel: next_to_clean <d6>
    Dec 9 08:14:12 xxx kernel: buffer_info[next_to_clean]
    Dec 9 08:14:12 xxx kernel: time_stamp <259ffe6>
    Dec 9 08:14:12 xxx kernel: next_to_watch <d6>
    Dec 9 08:14:12 xxx kernel: jiffies <25a3bd8>
    Dec 9 08:14:12 xxx kernel: next_to_watch.status <1>

    here some NIC driver informations:
    ethtool -i Lan1
    driver: e1000
    version: 7.6.12-NAPI
    firmware-version: 5.6-2
    bus-info: 0000:09:00.0

    any help is appreciated

    cheers

  2. #2
    Join Date
    2005-11-25
    Location
    United States, Southeast
    Posts
    857
    Rep Power
    15

    Default Re: NIC Connection Hangs on Power-1 9070

    Open a Ticket with CheckPoint..

  3. #3
    Join Date
    2008-09-10
    Posts
    4
    Rep Power
    0

    Default Re: NIC Connection Hangs on Power-1 9070

    already open since yesterday...unfortunately no response yet...
    but thanks for your input!

  4. #4
    Join Date
    2009-04-30
    Location
    Colorado, USA
    Posts
    2,252
    Rep Power
    14

    Default Re: NIC Connection Hangs on Power-1 9070

    You need an updated Intel NIC driver for whatever release of firewall code you are running. Check Point support can provide it. See sk37503 for more details.

  5. #5
    Join Date
    2008-09-10
    Posts
    4
    Rep Power
    0

    Default Re: NIC Connection Hangs on Power-1 9070

    since the driver upgrade:
    driver: e1000
    version: 7.6.15.5-NAPI
    firmware-version: 5.6-2
    bus-info: 0000:09:00.0

    it worked for 4 Weeks...but know it came again up this strange issue...

    anybody experience somthing similar?

    Cheers

  6. #6
    Join Date
    2011-11-20
    Posts
    31
    Rep Power
    0

    Default Re: NIC Connection Hangs on Power-1 9070

    Quote Originally Posted by empichur View Post
    since the driver upgrade:
    driver: e1000
    version: 7.6.15.5-NAPI
    firmware-version: 5.6-2
    bus-info: 0000:09:00.0

    it worked for 4 Weeks...but know it came again up this strange issue...

    anybody experience somthing similar?

    Cheers
    Yes, same here but on a UTM-1 3070...

    Have you ruled out the things specified in the important notes section at the bottom of sk37503 ?

  7. #7
    Join Date
    2011-11-20
    Posts
    31
    Rep Power
    0

    Default Re: NIC Connection Hangs on Power-1 9070

    Quote Originally Posted by AKKO_CP View Post
    Yes, same here but on a UTM-1 3070...

    Have you ruled out the things specified in the important notes section at the bottom of sk37503 ?
    *bump*

    Any updates/progress?

    We're currently putting in place measures to mitigate Soft IRQ values from getting too high to see if this is a contributing factor in our case.

Similar Threads

  1. Packets drops during policy installation on Power-1 9070
    By Ivan.wwwcom.ru in forum Check Point Power-1 Appliances
    Replies: 16
    Last Post: 2011-08-02, 04:15
  2. Power-1 Nic Bonding
    By YerMa in forum Check Point SecurePlatform (SPLAT)
    Replies: 6
    Last Post: 2010-07-26, 04:23
  3. Power-1 Appliances - 5070/9070
    By akajee in forum Check Point UTM-1 Appliances
    Replies: 7
    Last Post: 2009-03-08, 01:36
  4. Redundent NIC/NIC teaming and load-sharing in Provider-1
    By cciesec2006 in forum Miscellaneous
    Replies: 1
    Last Post: 2008-07-10, 21:48
  5. Connection Hangs on Large File Transfers with SecuRemote
    By Barry J. Stiefel in forum SecureClient/SecuRemote
    Replies: 0
    Last Post: 2005-08-12, 23:06

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •