RE: [FW1] FW-1 plus load-balancing

["Mark L. Decker" <mdecker@FW1-NOSPAMrainfinity.com>]

Thomas,

Yes, if you use multiple VIPs, you will need to configure multiple default
routes on your router.  GateD cannot advertise routes using a virtual IP,
but you don't need GateD/OSPF to round-robin among the VIPs.  It is possible
to round-robin among the VIPs using equal-cost static routes.  Cisco
routers, for example, support such a configuration, and most of our
customers who use the Multi-VIP option have set it up this way.

There may be other options as well, depending on the details of your
environment and requirements.  I'll forward your message to one of our SEs
in Europe and ask him to contact you offline to gather more information.  He
can help you determine if Rainwall will work in your case, and how much
integration will be required.

Mark

-----Original Message-----
From: Thomas Nau
Sent: Monday, October 23, 2000 11:13 PM

Mark,

thanks for the hints to your companies product. I allready checked your
site for information but I'm still not sure if it works in our environment
without changing our infrastructure. We are a University own a class B
network divided into about 180 class-C ones. So if we setup rainwall with
a bunch of VIPs on the firewall we would need to have different default
routes for the subnetworks don't we? If yes we would like to setup a
number of default routes to the VIPs using OSPF but all having the same
metric so that the subnet routers will do basic load balancing. The
routing information would be supplied by the firewalls
themself using gated. Will this most likely work?

Thomas



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================