[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW1] Implementation of MEP and SEP for SA
If you look at the documentation on Checkpoints website - MEP is only for SecuRemote connections. As there is no synchronisation of the state tables of either gateway then you don't need any HA software. Remember that MEP's are a way to provide a backup entry point for SecuRemote users only and not a SEP HA solution. Both gateways can be on the same network. The state tables are not synchronised as in a SEP HA setup so you will lose your active connections when the gateways failover. HTH, Ash KMoussavi <[email protected]> Sent by: To: "FW List (E-mail)" [email protected] <[email protected]> kpoint.com cc: Subject: [FW1] Implementation of MEP and SEP for SA 20/06/2001 12:39 AM Folks, Question regarding Check Point's MEP implementation... 1. Will current active connections stay active after a Module switch; in case Gateway A goes down and Gateway B takes over? 2. Check Point has configuration instructions for setting up a MEP but they have Gateway B and Gateway A on different networks. Can both Gateways be on the same network? Check Point specifies that the following is only needed to create a back up gateway through MEP: 1. Install FW-1 on GWA & GWB 2. Ensure proper routing 3. Enable "backup gateway for SR" 4. Enable IP Pool (if you want) 5. Ensure no clear text topology transfer 6. Create objects for GWA & B 7. Configure SR. What about the actual HA software. Is that not needed or will only enabling "backup gateway for SR" take care of it? Thank You Keyvan ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|