Search found 35 matches

by anders s
30 Oct 2017, 12:53
Forum: SG Discussions
Topic: Routing
Replies: 2
Views: 1984

Re: Routing

Create a secondary routing table that only has the default route for aux, set "outbound routing table" on the ipsec interface to the secondary routing table
by anders s
30 Oct 2017, 12:51
Forum: SG Discussions
Topic: Forward traffic from WAN to WAN
Replies: 2
Views: 2457

Re: Forward traffic from WAN to WAN

You need a SAT + NAT rule, otherwise the respnse will be sent from new server directly to client and will not be allowed by neither the clients firewall or the client.
by anders s
16 Feb 2017, 11:09
Forum: InControl Discussions
Topic: Create objects in Global Domain per Console?
Replies: 1
Views: 2327

Re: Create objects in Global Domain per Console?

I don't think so. You will have to use the API, check the SDK documentation for InControl
by anders s
25 Oct 2016, 09:58
Forum: SG Discussions
Topic: Distance between HA pair members
Replies: 3
Views: 3225

Re: Distance between HA pair members

The only fully supported option is a <100m ethernet cable between the sync ports One of my customers runs HA on a vlan over a 10km fiber between the datacenters, they have been running it that way for many years without any issues. Another customer have a 100Mbit line between the datacenters that is...
by anders s
03 Aug 2016, 10:51
Forum: SG Discussions
Topic: Restore a E5 backup on a E20
Replies: 1
Views: 1899

Re: Restore a E5 backup on a E20

You need to use the hardware migration wizard available for download under Tools & Utilities on My Clavister
by anders s
26 Jul 2016, 11:46
Forum: SG Discussions
Topic: claister console commands "ike" vs "ipsecstats"
Replies: 2
Views: 2647

Re: claister console commands "ike" vs "ipsecstats"

As is listed in the CLI output "ipsecstats" is replaced with "ipsec -show", not "ike -show".
ipsec -num=200 -show VPN_NMTROAMING should give you the same output of all the phase 2 ipsec SA.
by anders s
04 Apr 2016, 14:48
Forum: InControl Discussions
Topic: Logging from external Clavsiter
Replies: 1
Views: 3191

Re: Logging from external Clavsiter

Make sure the IP Address in logging agent, registered gateways matches the source IP of the log packets
by anders s
17 Nov 2015, 09:52
Forum: InControl Discussions
Topic: Does anyone still have Finetune?
Replies: 10
Views: 10942

Re: Does anyone still have Finetune?

CorePlus 8.90 is still available for download. My Clavister, Download, Archive, Clavister CorePlus, Select Release: Clavister CorePlus 8.90.13. I Think Finetune 8.90 should work with CorePlus 8.70
by anders s
02 Nov 2015, 09:11
Forum: SG Discussions
Topic: Export list with Netobjects that are in use
Replies: 2
Views: 2666

Re: Export list with Netobjects that are in use

As far as I know it is not possible without scripting a config file analysis or possibly looking programmatically through API.

I would like to se a new column "References" in InControl.
by anders s
22 Oct 2015, 12:33
Forum: SG Discussions
Topic: Timeserver synchronisation
Replies: 2
Views: 2299

Re: Timeserver synchronisation

If you search the logs for category timesync you will see message 3500001, event synced_clock with IP address used.