RE: [FW1] IPSO VRRP issue

[Konstantin Matev <kmatev@FW1-NOSPAMbreakwatersecurity.com>]

Then upgrade to IPSO 3.3.x and you should be able to ping the VIP address.
It is an option supported in IPSO 3.3.0.

-Dex

-----Original Message-----
From: Dave Dunaway (ncc0296) [mailto:ddunaway@corp.netcom.ca]
Sent: Monday, January 08, 2001 3:12 PM
To: Vince Kornacki
Cc: 'Chris Arnold'; fw-1-mailinglist@lists.us.checkpoint.com
Subject: Re: [FW1] IPSO VRRP issue




Er...ok, but in the case where my cisco 6509 using msfc won't add an entry
in its arp table because it can't ping the VRRP vip....what then? :)
Any ideas? 

On Fri, Jan 05, 2001 at 04:58:54PM -0600, Vince Kornacki wrote:
> Chris, 
> 
> Per RFC 2338, VRRP VIPs are not required to respond to echo-requests
> (pings). 
> 
> Hope this helps. 
> 
> Vince Kornacki 
> 
> -----Original Message----- 
> From: Chris Arnold [ mailto:chris.arnold@WheelHouse.com
> <mailto:chris.arnold@WheelHouse.com> ] 
> Sent: Friday, January 05, 2001 4:29 PM 
> To: fw-1-mailinglist@lists.us.checkpoint.com 
> Subject: [FW1] IPSO VRRP issue 
> 
> 
> 
> Hello.  I just did the initial VRRP configuration on a pair of Nokias
> (IPSO 
> 3.2.1).  I followed the instructions in Nokia's knowledgebase and it 
> appeared to be correct.  I'm seeing the VRRP traffic allowed in the FW
> log 
> (CP 4.1 sp2) and netstat -rn and ifconfig -a from the command line(s)
> show 
> the virtual IP address (and fail-over appears to work) but I can't ping
> it. 
> There are no CP rules blocking this.  Any thoughts? 
> 
> Thanks. 
> 
> Chris 
> 
> 
> ========================================================================
> ======== 
>      To unsubscribe from this mailing list, please see the instructions
> at 
>                http://www.checkpoint.com/services/mailing.html
> <http://www.checkpoint.com/services/mailing.html>  
> ========================================================================
> ======== 
> 

-- 
Dave Dunaway [ddunaway@corp.netcom.ca]


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================