Troubleshooting guide

Chapter 4 Troubleshooting Routers and Embedded Systems VPN-1/FireWall-1 configuration for a Nortel (Bay Networks) BayRS router

Advanced Technical Reference Guide 4.1 • June 2000 31

Management Server to GUI Client Communications

• Communication between Management Server and GUI Client (including Username/Password) is encrypted

on port #258

VPN-1/FireWall-1 configuration for a Nortel (Bay Networks)

BayRS router

Functions supported in VPN-1/FireWall-1 on Nortel routers

The functions supported in VPN-1/FireWall-1 on a Nortel (Bay Networks) BayRS router are:

• Accept/Reject rules

• Logs and Alerts

• Anti-Spoofing

• Time objects (for version 4.1 and higher)

Common problems resolution

This section lists some common problems and solution from the Check Point Technical Services

SecureKnowledge knowledge base.

What happens when applying the Gateway rule to Interface and the direction

set to “Eitherbound”

See the SecureKnowledge Solution (ID: 10022.0.1673175.2471537) in the Check Point Technical Services site

Problem which the time in log entries is different to the time on the router and

the Management module.

See the SecureKnowledge Solution (ID: 3.0.666864.2300662) in the Check Point Technical Services site

Problem which the $FWDIR/log/fw.log file is growing out of proportion when

using VPN-1/FireWall-1management module.

See the SecureKnowledge Solution (ID: 10043.0.4387594.2572347) in the Check Point Technical Services site

Problem which the remote Firewall is not dynamically downloading the correct

policy

See the SecureKnowledge Solution (ID: 10022.0.1673144.2471537) in the Check Point Technical Services site

Problem, which the management module doesn’t get, logs from routers, few

possible causes and resolution.

See the SecureKnowledge Solution (ID: 10022.0.527050.2411096) in the Check Point Technical Services site

Problem which after installing policy, the system status will display HELP on a

Nortel (Bay) Router.

See the SecureKnowledge Solution (ID: 55.0.3594400.2592864) in the Check Point Technical Services site