Secure Computing sidewinder, Startup Manual

Page: 56 / 68

Appendix B: Tips and Troubleshooting
Verifying interface information
44
Verifying
interface
information
If the Sidewinder
appliance
’s initial routing information is incorrect (such as
misconfigured IP addresses and netmasks), you will need to change this
information directly on the
appliance ’s local console. Use the following
commands to help you review and edit this information.
These steps assume you only have two interfaces configured, with a cable
connecting each interface to its respective network or subnet.
1
From a console attached to the appliance, log in and enter
srole
to switch
to the Admn domain.
2
Enter
cf interface q
to display the interface configuration. Check the
following:
•
The IP address (
ipaddr
) and netmask (
mask
) shown for both interfaces
are appropriate.
• Both interfaces are enabled (
enabled=on
).
If any information is incorrect, enter
man cf_interface
for information
on correcting it.
3
Enter
ifconfig -a
to get the status of the network interfaces. Check the
following:
•
Both interfaces’ flags include
UP
and
RUNNING
.
• Both interfaces’ speed values (
10baseT
,
100baseTX
, or
1000baseT
)
and media type values (most likely
autoselect
) are as expected.
• Both interfaces show
status: active
. If the ifconfig output shows
status: no-carrier
, then no cable is connected to the interface or
the device at the other end of the cable is misconfigured or not powered
on. Follow standard troubleshooting techniques to resolve the problem.
Note: The external interface on the Sidewinder appliance is automatically
configured to discard ping requests.
If any information is incorrect, enter
man ifconfig
(temporary changes)
or
man cf_interface
(permanent changes) for information on correcting
it.
4 For systems configured using DHCP, enter the following command to check
routing information:
netstat -nr
Verify that the routing information is appropriate for this
appliance
.