Re: [FW1] Authentication for command fetch failed

["Robert MacDonald" <Robert.MacDonald@FW1-NOSPAMhaworth.com>]

Jaime,

Verify that time is the same on both systems. Then fwstop both systems.
Now run the fw putkey from the management station, then the module.
Start the fw software on the management station first, then the module.

Don't use the interface name, but use the IP address closest to each of
them(the one on the same network).

You didn't goof with the control.map did you?

Robert

- -
Robert P. MacDonald
Global Information Services, Haworth, Inc.
Voice:email: Robert.MacDonald@haworth.com

>>> Velasquez Venegas Jaime Omar <jaime@ulima.edu.pe> 01/26/01 01:42PM >>>
>
>Trying to install FW-1 on a Distributed Mode , we have this *typical*
>scenario:
>
>[M.Module] ------[FW-1] --------[Internet]
>
>Suppose M.Module and one of FW-1 Interfaces are on the trusted zone.
>M.Module is doing NAT to a valid ip address too.
>
>On M.Module , after Managament Module installation we did: 
>Remote Modules: [Interface on Trusted Zone of FW-1]
>fw putkey [Interface on Trusted Zone of FW-1]
>
>On FW-1 Module , after Firewall Module installation we did:
>fw putkey [Interface on trusted zone of M.Module]
>
>However , when we start fw-1 service on FW-1 , we get this error:
>
>Authentication for command fetch failed
>Fetching security policy from  [Interface on trusted zone of M.Module]
>failed!
>
>How can i fix this?
>
>Also , are those fw putkey ok?
>and yes both workstations can *see* each other
>
>Jaime O.




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================