Firewall Wizards mailing list archives

Re: Help Request -- Firewall-1 Link Down


From: "David R. Sears" <sears () eglin af mil>
Date: Mon, 12 Apr 1999 07:06:07 -0500 (CDT)


We had the same problems.  Add the the following lines to your /etc/system
file to force the hme1 interface to 100 Mbps Full Duplex and the problem
should go away.  (autosensing doesn't work properly...)

*
* Configure hme interface for full duplex 100 Mb
 
set hme:hme_adv_autoneg_cap=0
set hme:hme_adv_100T4_cap=0
set hme:hme_adv_100fdx_cap=1
set hme:hme_adv_100hdx_cap=0
set hme:hme_adv_10fdx_cap=0
set hme:hme_adv_10hdx_cap=0


(NOTE: set hme:hme_adv_100fdx_cap=1  is the line that does the work.)


+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

On Sat, 10 Apr 1999, Ryan Russell wrote:



I will periodically lose
connections to (and through) the firewall. The /var/adm/messages file will
record this series of messages at each occurance.

Mar 29 15:23:28 granite unix: SUNW,hme1: Link Down - cable problem?
Mar 29 15:23:30 granite unix: SUNW,hme1: Link Down - cable problem?
Mar 29 15:23:31 granite unix: SUNW,hme1: Using Internal Transceiver
Mar 29 15:23:31 granite unix: SUNW,hme1: 100 Mbps half-duplex Link Up

I've had this a few times.  Didn't track this down completely, but the problem
has to do with the Sun box trying to auto-sense speed and duplex on
the hme.  I was constantly having this problem when I had one interface
plugged directly into a Cisco 7513 using the older (non-VIP) 100Mb
router card, with a cross-connect cable.  The routers don't seem as
autosense-friendly as the switches do.  I fixed that by running it
through a Catalyst 5500 switch and then to the router.  For whatever reason,
the Cats sync up fine with the routers, go figure.

There are also Sun patches that are supposed to relate to this, though
the description specifically mentions Bay switches.  I remember the
patches fixing one similar problem I had on a Sun server.

There's the more obvious stuff... force one or both ends of the link to
a speed and duplex, make sure that you're using Cat 5 cable,
that none of the cable is marginal, etc...

                              Ryan








Current thread: