05-10-2012 03:55 AM
I have 2 SSG5 firewalls running ver 220.127.116.11 Initial command line set up configured bgroup1 for untrust on eth0/0 and eth0/1. Bgroup0 (trust) on eth0/3-4-5.
I have configured the exact same details on to NSM. I have the firewall on a remote site and deplyed changes to the firewall. The firewall takes changes but not all. I have tried to push dhcp relay and other changes to bgroup0 (trust) but none of these changes take place. I have no changes configured for bgroup1 (untrust) but when running a delta-config the first thing NSM try's to push to the firewall is..
unset interface bgroup0 ip
unset interface bgroup1 ip
set interface bgroup0 ip xx.x.xx.x/xx
set interface bgroup0 nat
set interface bgroup0 dhcp relay vpn
set interface bgroup0 dhcp relay server-name xx.x.xx.xxx
set interface bgroup0 dhcp relay service
set interface bgroup0 protocol ospf area 0.0.0.0
set interface bgroup0 protocol ospf enable
set interface bgroup0 protocol ospf cost 5
set interface bgroup0 protocol ospf retransmit-interval 5
set interface bgroup1 ip xx.xxx.xxx.xxx/xx
set interface bgroup1 route
It try's to unset the interfaces first although the config on both are the same. It will of course not unset bgroup1 as that is the interface i am using to connect with NSR.
Has anybody experiences this sort of issue? I'd really appreciate some feedback.