how to force nc7781 gigabit nic to autoneg off

[avi_16]

hello ,
i just installed checkpoint firewall r55 build 127 on hp blade server model "bl20p G2" ,this server is using 3 nic cards model "NC7781 gigabit server adapter".

how can i set the nic speed to 1000mbs+full duplex and prevent auto negotiation mode ???



when I am clicking "ethtool eth1" this is what I see : "



Settings for eth1:

Supported ports: [ TP ]

Supported link modes: 10baseT/Half 10baseT/Full

100baseT/Half 100baseT/Full

1000baseT/Half 1000baseT/Full

Supports auto-negotiation: Yes

Advertised link modes: 10baseT/Half 10baseT/Full

100baseT/Half 100baseT/Full

1000baseT/Half 1000baseT/Full

Advertised auto-negotiation: Yes

Speed: 1000Mb/s

Duplex: Full

Port: Twisted Pair

PHYAD: 0

Transceiver: internal

Auto-negotiation: on

Supports Wake-on: g

Wake-on: d"

And when I am clicking mii-tool I see :"

eth0: no link

eth1: negotiated flow-control, link ok

eth2: negotiated flow-control, link ok"

so in my case which tool is with the true values ?



So how I can set the nics that will work anyway only at speed 1000mbs+only at Full Duplex mode + only with Auto-negotiation: off ????



With the ethtool I failed to prevent/disable the Auto-negotiation…

should i need to replace the driver ?

2 ) all of my lan on cisco 1 giga switches ,how can I be sure that my firewall nics are working fine with my switch and at the correct speed ?? (from my switch I can see that everything is ok,but from the fw how can I see that everything is ok) ?



Please answer me at details….

Respectfully,
avi azerrad

[Sergejs Svitnevs]

1. Try to execute:
# ethtool -s eth1 speed 1000 duplex full autoneg off

Usually the use of autonegation with gigabit card is mandatory but you should try ...

2. If "ifconfig eth1" shows errors=0 and collisions=0, then everything is ok.

Regards

[avi_16]

hi ,
when i am clicking ifconfig eth1 i cannot see any error ,everything is fine..
but when i am clicking :"grep eth1 /etc/modules.conf"
i see :"
[Expert@fwipvpn]# grep eth1 /etc/modules.conf
alias eth1 bcm5700 line_speed=1000 auto_speed=0 full_duplex=1"
so i am asking ,with this config results,i am truely working (force my nic) only at speed 1000+full duplex ??
if no please explain me how to edit the file that will force my nic to work only at speed 1000+full duplex .

2) how can i know that i am working with the right driver ??
please explain me at details..

respectfully,
avi azerrad

[Ivan Ferreira]

mii-tool is obsolete and was replaced by ethtool, you should trust ethtool. Also I would remove the options from the module load and use ethtool to set the values.

[Vipulinux]

mii-tool should do the trick, i know its old but should work..

[rick jones]

It was my understanding that operation at gigabit speeds required autoneg to be set. If you are looking to hardcode your Gigabit NICs to full duplex simply because you are used to that for older and/or crappy 100BT kit, I think you can stop worry about hardcoding now you are at gigabit.

[avi_16]

hi ,
thanks,
so are you sure that after i configured my nic card at speed 1000+full duplex (with eth too+the config file "alias eth1 bcm5700 line_speed=1000 auto_speed=0 full_duplex=1")
its is now on 1000+full duplex and it will not work with speed 100 ?

2) or should i need to delete the line at the config file :"alias eth1 bcm5700 line_speed=1000 auto_speed=0 full_duplex=1" ?

3) if i understanig right,so at speed 1000 there is no option to disable autoneg ?
(if yes please tell me how )
thnk you,
respectfully,
avi azerrad

[Ivan Ferreira]

Normally, according to a standar, autonegotiation must be enabled for 1000 Mb/s.

See:
http://www.sun.com/blueprints/0704/817-7526.pdf

New technologies such as 1000BASE-T require autonegotiation.

The IEEE 802.3 standard default is to run with autonegotiation enabled. Technology improvements, and better interoperation of autonegotiation make it the preferred mode of operation, and is required on new technologies such as 1000BASE-T (802.3ab)

[avi_16]

hello
thank you all for your fast reply..
so i understand that at my giga nic nc7781 i cannot disable the autonegoatition and its ok.
but please answer me once...when i am cilcking the command :"grep eth1 /etc/modules.conf"
i am getting :"alias eth1 bcm5700 line_speed=1000 auto_speed=0 full_duplex=1"
so again i am asking ..those parameters are ok ???(because i wrote those parameters ath the conf file to force full duplex+speed 1000) ?
or should i need to delete this line from the file ???

2) if the its ok (what i already configured) now i can be sure that my nic will work only with full duplex+speed 1000,and will not be able to work at spee 10/100 ??
please answer me at details....
respectfully,
avi azerrad

[Vitaly Karasik_1]

[as already answered]
1) as far as I know, this line will work, but it's very recommended to use autonegotiation for working with 1Gb speed

2) yes, this line in modules.conf should prevent your server to work with non-Gb switchs. In fact, you can easy check this by connecting your server to non-Gb switch.

But may I ask you - for which reason do you want to use this configuration?
Can you provide us with more details about your environment and objectives, so we will be able [hopefully] to recommend you smart solution.

Rgds,
Vitaly

[avi_16]

hello dear vitaly,

thank you for your reply,
i just wnat be sure that my nic will work all the time at speed 1000+full duplex,because i am using at very strong wan lines like 200 mb or one giga).
so i understand that in my case at nics of giga (like myself) we cannot disable the autoneg ? (or as you said i will leave it on autoneg on mode for better performence).

so the the line :"alias eth1 bcm5700 line_speed=1000 auto_speed=0 full_duplex=1"
is ok ?

respectfully,
avi azerrad

[Vitaly Karasik_1 · Accepted solution]

As far as I know, the best solution will be remove all module parameters (e.g. leave only "alias bcm5700 ethX") from modules.conf - so NIC driver will autonegotiate. I suggest you to reboot your linux server without module params, run some tasks for stress network and check that you don't see network errors on Linux (ifconfig) and on your network switch. If you see no errors - I suggest to stay wit hsuch configuration.

[avi_16]

thank you very much

[avi_16]

vitaly