topic Re: Installation failed. Reason: Memory allocation problem in Policy installation function. in Spark Firewall (SMB)

Installation failed. Reason: Memory allocation problem in Policy installation function.

nflnetwork29 — Sat, 19 Dec 2020 08:24:57 GMT

we have a centrally managed 1550 Cluster XL running R80.20.15 - Build 682

when i try to install policy it always fails on the active member and installs on the standby no issues.

The message is indicating a memory error but the boxes do not seem to be running out of memory.

[Expert@GW1]# free -m
total used free shared buffers cached
Mem: 2000884 1677392 323492 46460 12196 516604
-/+ buffers/cache: 1148592 852292
Swap: 0 0 0

I've had a ticket open with TAC for about 10 days with still no resolution . Though I would check in the forums for any ideas?

Re: Installation failed. Reason: Memory allocation problem in Policy installation function.

nflnetwork29 — Sat, 19 Dec 2020 08:28:05 GMT

[Expert@GW2]# free -m
total used free shared buffers cached
Mem: 2000884 1738000 262884 56924 8056 560276
-/+ buffers/cache: 1169668 831216
Swap: 0 0 0

Re: Installation failed. Reason: Memory allocation problem in Policy installation function.

G_W_Albrecht — Sat, 19 Dec 2020 09:03:20 GMT

This post should be in SMB ! What happens if you do a policy pull on the active node ? What happens after a failover ?

Re: Installation failed. Reason: Memory allocation problem in Policy installation function.

nflnetwork29 — Sat, 19 Dec 2020 17:00:11 GMT

I've manually forced a failover and tried that as well. again it will ONLY fail on the active member of the ClusterXL.

I've only tried pushing policy from the MDS

Re: Installation failed. Reason: Memory allocation problem in Policy installation function.

G_W_Albrecht — Sat, 19 Dec 2020 17:37:44 GMT

Connect using SSH to each node and issue

# fetch policy mgmt-ipv4-address <sms IP>

Re: Installation failed. Reason: Memory allocation problem in Policy installation function.

nflnetwork29 — Sat, 19 Dec 2020 18:26:25 GMT

same message on both :

HQ-FW2> fetch policy mgmt-ipv4-address x.x.x.x
Fetching policy from x.x.x.x
Fetching Security Policy from 'x.x.x.x'

Local Security Policy is Up-To-Date.

Installing Security Policy...
IPS package: Compiled OK.

Installing Security Policy Succeeded.
Done.

sfw_mac_filtering_config: ioctl SFW_MAC_FILTERING failed.
ioctl 43 to the sim device failed (ppak_id=0, rc=-1, errno=22)
sim_arp_spoofing: ioctl to the SecureXL device failed -1
Unable to configure anti ARP spoofing

sk167416 - "sfw_mac_filtering_config: ioctl SFW_MAC_FILTERING failed" message when pushing policy on a 1500 device

Cause

This is a cosmetic issue. MAC filtering is not supported on 1500 appliances.

Re: Installation failed. Reason: Memory allocation problem in Policy installation function.

G_W_Albrecht — Sat, 19 Dec 2020 21:21:19 GMT

Both nodes have the current policy - alter the policy, install and try on the failing node again.

Re: Installation failed. Reason: Memory allocation problem in Policy installation function.

nflnetwork29 — Sat, 19 Dec 2020 22:49:07 GMT

install via fetch or via sms push?

Re: Installation failed. Reason: Memory allocation problem in Policy installation function.

PhoneBoy — Sun, 20 Dec 2020 07:44:52 GMT

What version/JHF are you pushing from?
Also, has TAC asked you to debug the policy installation process yet?
Send the SR number in a PM.

Re: Installation failed. Reason: Memory allocation problem in Policy installation function.

nflnetwork29 — Sun, 20 Dec 2020 16:53:52 GMT

80.40 take 89

yes they have taken a debug during policy push and nothing has been resolved yet.

i will send the SR in a PM