topic Re: Table.def is not override in Firewall and Security Management

Table.def is not override

ERTK — Thu, 30 Dec 2021 14:20:05 GMT

Hi,

I am cheking a mds migration with some old cluster...one of the requirement is making some mosification over table.def file in order to allow tacacs auth.

I modify the file over path noted on guide for making the change and pushed policy over the cluster but...on cluster table.def is not modify. Any suggenstions will be appreciated

Re: Table.def is not override

_Val_ — Thu, 30 Dec 2021 14:36:39 GMT

make sure you modify the table in the right package. It has to be backward compatibility directory and not your regular $FWDIR on the management, if the cluster and GW versions are not matched.

Re: Table.def is not override

ERTK — Thu, 30 Dec 2021 14:49:56 GMT

I had checked 4 times...

Mds r80.40

gw r77.30

$MDSDIR/customers/domainname/CPR77CMPR80.40/lib/table.def

Re: Table.def is not override

_Val_ — Thu, 30 Dec 2021 14:56:22 GMT

Please open a TAC case for this.

Re: Table.def is not override

_Val_ — Thu, 30 Dec 2021 14:57:10 GMT

One more question, did you restart your domain during this trials? If you did, go straight to TAC, if you did not, try that first.

Re: Table.def is not override

ERTK — Thu, 30 Dec 2021 14:59:28 GMT

Sure, I did it. It is under investigation.

I only want to know if somebody found the same issue

Re: Table.def is not override

ERTK — Thu, 30 Dec 2021 15:03:03 GMT

Yes. I rebooted both...gateway and mds.

Re: Table.def is not override

the_rock — Thu, 30 Dec 2021 18:11:59 GMT

That would appear to be the right path...curious what TAC tells you. Keep us posted. Happy new Year!

Re: Table.def is not override

ERTK — Mon, 10 Jan 2022 10:32:41 GMT

TAC answer:

"Though sk98339 indicates differently, The table.def file on the GW will not change and should not be changed.
The sk will be updated in the near future.
The correct way to check if it worked on the GW was using the following command:

# fw tab -t no_hide_services_ports -u
"