Great Circle Associates Firewalls
(October 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Gauntlet 3.1 on SGI IRIX and SecurID
From: Eric Kimminau <root @ dosgod . mi . org>
Date: Wed, 2 Oct 1996 23:04:29 -0400 (EDT)
To: Tony . Bakker @ ecmwf . int
Cc: Mikael Kuisma <Mikael . Kuisma @ Nexus . SE>, sdadmin @ jabberwocky . bbnplanet . com, Firewalls @ greatcircle . com
In-reply-to: <9610021404 . ZM29469 @ barant>

Since Gauntlet 3.1 is ONLY for IRIX 5.3, Im assuming that you are NOT 
trying to use multiple netmasks on this system, that is, the netmask for 
all interfaces in this system is netmask 0xfffffc00 - I also see a 
GLARING problem in your network configuration, in that the broadcast 
address for this interface doesn't match the IP address assigned to it, 
ie: for an IP address of 136.156.112.128 with a netmask 0xfffffc00 
the broadcast address SHOULD be 136.156.112.255 NOT 136.156.115.255. Id 
start there.

Good luck.
            Eric.


On Wed, 2 Oct 1996, Tony Bakker wrote:

> Date: Wed, 2 Oct 1996 14:04:42 +0100
> From: Tony Bakker <cgt @
 ecmwf .
 int>
> To: Mikael Kuisma <Mikael .
 Kuisma @
 Nexus .
 SE>
> Cc: sdadmin @
 jabberwocky .
 bbnplanet .
 com, Firewalls @
 greatcircle .
 com
> Subject: Re: Gauntlet 3.1 on SGI IRIX and SecurID
> 
> [To unsubscribe, mail to majordomo @
 jabberwocky .
 bbnplanet .
 com]
> On Oct 2, 10:40, Mikael Kuisma wrote:
> > Subject: Re: Gauntlet 3.1 on SGI IRIX and SecurID
> > Tony Bakker wrote:
> > > In the netperm-table I have got the line:
> > >
> > > authsrv: securidhost isis
> >
> > isis should be the name/address of the inside
> > interface on the Gauntlet, i.e. the host
> > that acts as the securid client. It should
> > not be the name of the ACE server.
> >
> 
> Done that, but it still does not work!
> 
>  # grep secur /usr/gauntlet/config/netperm-table
> authsrv: securidhost 136.156.112.128
> 
> # ifconfig ec0
> ec0: flags=c63<UP,BROADCAST,NOTRAILERS,RUNNING,FILTMULTI,MULTICAST>
>         inet 136.156.112.128 netmask 0xfffffc00 broadcast 136.156.115.255
> 
> authsrv[24258]: ACM Error: Unable to locate ACE/Server host
> ; error Error 0
> 
> 
> Tony
> 

========================================================================
Eric Kimminau   eric @
 kimminau .
 org   "I speak my mind and no one else's."

  "I am the downhill tumble and roll champ, king of the toad finders, 
  captain of the high altitude tree branch vista club, second place 
  finisher in the round the yard backward dash, premier burper state 
  division, sodbuster and worm scout first order, and generalissimo 
  of the mud and mayhem society."
                                                        Calvin, 1995
             Baroque (adj.): when you run out of Monet.
                      In dog years, Im dead.                  



References:
Indexed By Date Previous: RE: NT Security
From: Russ <Russ . Cooper @ RC . Toronto . on . ca>
Next: How does one set a rule in IBM's Internet Secure Network Gateway to allow Notes 4.1.4 replication?
From: Nestor & Christine Navarro <nnavarro @ pathcom . com>
Indexed By Thread Previous: Re: Gauntlet 3.1 on SGI IRIX and SecurID
From: cgt @ ecmwf . int (Tony Bakker)
Next: DHCP and Firewalls
From: jbarnes @ oldmutual . com (Jay Barnes)

Google
 
Search Internet Search www.greatcircle.com