Check Point IP690 - Flash Based Sys, Installation Manual, Page: 103 / 118

General Troubleshooting Information
Check Point IP690 Security Platform Installation Guide 103
Problem No route to network.
Solution Check the routing table to see if a route exists to the network where the interface is
located. If no route exists, see “Troubleshooting Routing Problems” on page 106.
Problem Attached device does not have proper default route or routing information.
Solution If a local computer is unable to ping through an attached appliance, the computer
might contain either an invalid default route or invalid routing information.
If you are using default routes from a computer, ensure that the local interface is the default route
for that computer.
Problem The ARP table has old information.
Solution If the ARP table has an old or invalid entry for the device associated with the IP
address you are attempting to ping, use Network Voyager to delete the invalid entry.
For information about how to access Network Voyager and the related reference materials, see
“Using Check Point Network Voyager” on page 38.
To delete the invalid entry
1.
Click Config.
2. Click ARP in the Interfaces section.
3. Click Display or Remove Dynamic ARP Entries.
4. Click Delete for the entry you want to delete.
5. Click Apply.
Problems with Multicast
Use tcpdump to view packets. To display packets for a specific interface, use the following
command: tcpdump
-i interface proto igmp
.
Under Routing Options in the Routing Configuration section in Network Voyager, you can also
enable several types of trace options for DVMRP. These traces are logged into
/var/tmp/
ipsrd.log
.
For information about how to access Network Voyager and the related reference materials, see
“Using Check Point Network Voyager” on page 38.
Problem No IP connectivity.
Solution Verify that you have IP connectivity; ping various hosts on each network.
Problem DVMRP is not enabled on the interfaces.
Solution Verify that DVMRP is enabled on the interfaces in use.