The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
|
How to increase OSPF adjacency membership on SecurePlatform Pro
|
Technical Level
|
| Solution ID |
sk32568 |
| Technical Level |
|
| Product |
Security Gateway, ClusterXL |
| Version |
All |
| OS |
SecurePlatform, SecurePlatform 2.6 |
| Platform / Model |
Intel/PC |
| Date Created |
12-Feb-2007
|
| Last Modified |
19-Oct-2016
|
Symptoms
- On SecurePlatform Pro, adding more than twenty OSPF adjacency members will fail.
- Errors similar to the following will appear in
/var/log/messages:
gated[8200]: task_set_option: task MRouting socket 19 option GroupAdd(10) interface 192.168.0.1(eth5.254) group 224.0.0.2: No buffer space available
Cause
OSPF adjacency membership is soft limited by the Linux kernel parameter:
/proc/sys/net/ipv4/igmp_max_memberships
On SecurePlatform Pro this parameter is set, by default, to "20".
Solution
Proceed as follows:
- Connect to command line on Secureplatform Pro.
- Log in to Expert Mode.
- Run:
[Expert@hostName]# echo 50 > /proc/sys/net/ipv4/igmp_max_memberships
In the example above, igmp_max_memberships has now been set to "50".
Note: To survive a reboot after change, set the parameter at the beginning of the CP products startup script: /etc/rc.d/init.d/cpboot
See sk33542 (Configuring security gateway parameters on SecurePlatform to survive a reboot)
