[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] preserve state table over reboot?
Title: RE: [FW-1] preserve state table over reboot? That's a very good question, and I don't know the answer. :) Read on, though... Since the state tables are implemented as dynamic hashes in kernel memory, that is awfully hard to do with just one box. You can dump the table contents in hex using fw tab, but I don't know of a way to re-inject this information. The most common way of handling this is to configure HA with state table synchronization. In this manner, as long as one of the boxes stays up, the table is preserved. If you don't need HA (and you have lots of money :), you could configure a "standby" firewall with no reachable interfaces, and just run a crossover on a dummy network to the "real" firewall, using the "standby" exclusively for state table maintenance. HTH - please post with further comments. Thanks! Dan Hitchcock
The information contained in this email message may be privileged, confidential and protected from disclosure. If you are not the intended recipient, any dissemination, distribution or copying is strictly prohibited. If you think you have received this email message in error, please email the sender at [email protected] -----Original Message-----
I'm running FW-1 4.1 SP5 on Redhat Linux, does anyone know if its possible to save the state table and reread it
Thanks! Bernd Leibing ===============================================
=================================================
|