Check Point IP690 - Flash Based Sys, Installation Manual

Page: 107 / 118

Troubleshooting Routing Problems
Check Point IP690 Security Platform Installation Guide 107
Under routing options in Network Voyager, you can also enable several types of trace options for
OSPF. These traces are logged in
/var/tmp/ipsrd.log
.
For information about how to access Network Voyager and the related reference materials, see
“Using Check Point Network Voyager” on page 38.
Problem OSPF is not configured.
Solution Verify that OSPF is properly configured for all interfaces that are involved in OSPF
routing. For more information, see Configuring OSPF from the Configuring Routing document
page in Network Voyager. You can access the document page by pressing Doc.
Problem OSPF hello and dead timers are not the same on each interface for a given link.
Solution Verify that the settings at the end of each link are identical.
Problem Attached devices do not support OSPF.
Solution Ensure that the attached IP690 supports OSPF. If the attached appliance does not
support OSPF, configure it with a protocol that the appliance supports and exchange routes with
OSPF, or set a default or static route.
Note
You can also use ICLID to display OSPF details.
Common Problems with RIP
Use tcpdump to view routing information. Use the following command to display routing
updates for a specific interface:
tcpdump -i interface proto rip
Under routing options in Network Voyager, you can also enable several types of trace options for
routing information protocol (RIP). These traces are logged in
/var/tmp/ipsrd.log
.
For information about how to access Network Voyager and the related reference materials, see
“Using Check Point Network Voyager” on page 38.
Problem Inconsistent subnet mask (netmask does not match the class of IP address for RIP
v1).
Solution RIP version 1 must use consistent subnet masks; change to RIP version 2 or OSPF
to use inconsistent subnet masks.
Problem Number of networks exceeds the RIP limit.
Solution RIP can span up to 16 networks. Verify that your network topology does not exceed
this limit.