Verifying Interface Information - Secure Computing sidewinder Startup Manual

Appendix B: Tips and Troubleshooting

Verifying interface information

Verifying
interface
information
44
If the Sidewinder
appliance
misconfigured IP addresses and netmasks), you will need to change this
information directly on the
commands to help you review and edit this information.
These steps assume you only have two interfaces configured, with a cable
connecting each interface to its respective network or subnet.
1 From a console attached to the appliance, log in and enter srole to switch
to the Admn domain.
2 Enter cf interface q to display the interface configuration. Check the
following:
• The IP address (
are appropriate.
• Both interfaces are enabled (
If any information is incorrect, enter man cf_interface for information
on correcting it.
3 Enter ifconfig -a to get the status of the network interfaces. Check the
following:
• Both interfaces' flags include
• Both interfaces' speed values (
and media type values (most likely
• Both interfaces show
status: no-carrier
the device at the other end of the cable is misconfigured or not powered
on. Follow standard troubleshooting techniques to resolve the problem.
Note: The external interface on the Sidewinder appliance is automatically
configured to discard ping requests.
If any information is incorrect, enter man ifconfig (temporary changes)
or man cf_interface (permanent changes) for information on correcting
it.
4 For systems configured using DHCP, enter the following command to check
routing information:
netstat -nr
Verify that the routing information is appropriate for this
's initial routing information is incorrect (such as
's local console. Use the following
appliance
) and netmask (
ipaddr
enabled=on
and
UP RUNNING
10baseT
autoselect
status: active
, then no cable is connected to the interface or
) shown for both interfaces
mask
).
.
, , or
100baseTX 1000baseT
) are as expected.
. If the ifconfig output shows
.
appliance
)