RE: Integrated server NT 4.0 and Raptor Firewall

What is the IP address of the AS/400 side of the virtual TR?  Use NETSTAT
and option 1.  My guess is that the IP address of the 400's virtual TR is
192.168.2.1.  That is where the conflict is coming from.

You can change the internal IP numbers.  I suggest you look into doing
that.


-------------------------
 Bryan Dietz
3X Corporation






                    "Richard Bryant"
                    <rbryant@quipp.com>       To:     <midrange-l@midrange.com>
                    Sent by:                  cc:
                    midrange-l-admin@mi       Subject:     RE: Integrated 
server NT 4.0 and Raptor Firewall
                    drange.com


                    11/27/2001 03:32 PM
                    Please respond to
                    midrange-l






The ip is 192.168.2.2 and mac 45:00:00:00:02:00 for the virtual and
192.168.2.1 for the firewall. I have come up with a workaround from
Symantec
which is to change the severity of the message in the level.cf file to
info.
I still would like to know how other shops are dealing with the problem.

-----Original Message-----
From: midrange-l-admin@midrange.com
[mailto:midrange-l-admin@midrange.com]On Behalf Of bdietz@3x.com
Sent: Tuesday, November 27, 2001 9:10 AM
To: midrange-l@midrange.com
Subject: Re: Integrated server NT 4.0 and Raptor Firewall



One thing to llook for is the IP address of the internal token-ring
interface.  This interface is how the 400 "talks" to the NT system.

>From the NT DOS prompt try IPCONFIG /ALL
and it can be seen from the as400 also.  NETSTAT option 1.


-------------------------
 Bryan Dietz
3X Corporation






                    "Richard Bryant"
                    <rbryant@quipp.com>       To:     "Midrange-L
\(E-mail\)" <midrange-l@midrange.com>
                    Sent by:                  cc:
                    midrange-l-admin@mi       Subject:     Integrated
server
NT 4.0 and Raptor Firewall
                    drange.com


                    11/27/2001 08:38 AM
                    Please respond to
                    midrange-l






I have been receiving the following error:

Nov 27 07:37:48.131  notifyd: 457 message repeated 11 times (Arp Error: A
host with address 192.168.2.2 (MAC 45:00:00:00:02:00) is active on
interface
192.168.2.2 -- this address is assigned to the firewall)

I have talked with Symantec and have been told the Axent firewall does not
support virtual IP addresses nor the configuration of AS/400 and integrated
server.

Does anyone here have this type of configuration and are you receiving this
message also?

Does not seem to affect anything, only that the firewall sends me 50
messages a day and makes it impossible to have Firewall errors routed to my
cell phone.


Richard Bryant
MIS Coordinator
Quipp Systems Inc.
rbryant@quipp.com