topic Re: Edit SIP_MAX_INVITE setting to persist after reboot in General Topics

Edit SIP_MAX_INVITE setting to persist after reboot

checkpointer — Mon, 27 Sep 2021 17:38:22 GMT

Hello,

We have changed the SIP_MAX_INVITE setting on the CLI of one of our VS instances (R80.40 on the 6600 platform) but want to make sure this is saved into the relevant file so the setting persists after reboot. How we can achieve this?

Checkpointer

Re: Edit SIP_MAX_INVITE setting to persist after reboot

PhoneBoy — Mon, 27 Sep 2021 18:29:25 GMT

Not familiar with this particular configuration.
What precise steps did you take?

Re: Edit SIP_MAX_INVITE setting to persist after reboot

checkpointer — Tue, 28 Sep 2021 06:57:27 GMT

Thanks Phoneboy,

I think this is really to do with maintaining manual edits after reboot in a VSX environment.

On the older appliance based FWs pre VSX we needed to amend a file for setting such as TCP max session so that when the FW rebooted the setting wasn’t lost as we had set it on the CLI.

Now that we have VSX with several VSs running on the appliances we are not sure if the same thing applies. We have set the config using CLI on each virtual system but we suspect these will be lost on restart.

Is there an SK that advises on this?

Regards,

Checkpointer

Re: Edit SIP_MAX_INVITE setting to persist after reboot

G_W_Albrecht — Tue, 28 Sep 2021 12:25:20 GMT

See sk26202 Changing the kernel global parameters for Check Point Security Gateway:

Global kernel parameters exist to control (customize) the behavior of Security Gateway (kernel parameters are located in the $FWDIR/boot/modules/fw*mod* kernel modules).

On VSX Gateway, value of a kernel parameter applies to all configured Virtual Systems / Virtual Routers (i.e., it is not possible to set a value of a kernel parameter per Virtual System / Virtual Router).

Re: Edit SIP_MAX_INVITE setting to persist after reboot

checkpointer — Tue, 28 Sep 2021 12:49:57 GMT

Thanks a mil guys!

Re: Edit SIP_MAX_INVITE setting to persist after reboot

G_W_Albrecht — Tue, 28 Sep 2021 14:44:53 GMT

But i do think that you really want to set the "sip_expire" kernel parameter.

Re: Edit SIP_MAX_INVITE setting to persist after reboot

checkpointer — Wed, 29 Sep 2021 13:08:11 GMT

Thanks GW, why do you say this?

Re: Edit SIP_MAX_INVITE setting to persist after reboot

G_W_Albrecht — Wed, 29 Sep 2021 13:26:22 GMT

Because i do not know a sip_max_reinvite kernel parameter, only sip_expire...