[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [FW1] VRRP and SecuRemote problem


The first thing you should check is to make sure that the firewalls are
syncing while the second Nokia is primary.  How do test failover?  
Do you maybe;
	1) Pull the cable that is the sync connection when failing over to
the second box, thereby losing the sync connection?
or
	2) Reboot the first Nokia to cause failover?  This would cause the
second Nokia to become primary, but then when the reboot is complete, the
first Nokia would come back up and become primary.  However, it probably
didn't have time to re-sync its state tables before becoming primary,
thereby dropping the current connections.  The Coldstart Delay setting in
the VRRP config page helps alleviate this by delaying the failover upon
reboot.

Jason


-----Original Message-----
From: Blitzzz blitzzz [mailto:[email protected]]
Sent: Monday, June 25, 2001 11:26 AM
To: [email protected]
Subject: [FW1] VRRP and SecuRemote problem



Hi,

I have two Nokia IP330 with VRRP configured.
In Checkpoint i have a Gateway Cluster configured with
the virtual IP and the two Nokia's as members.

My problem is not when the Primary fails, that works
great the second Nokia takes over the Securemote
connection, the problem is when the Primary comes back
up i lose the SecuRemote connection.

Using IPSO 3.3 with BOOTMGR 3.3, CheckPoint SP3

In the two Nokia's i have the IFWD daemon disabled.

Any ideas ?

Thank you


__________________________________________________
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail
http://personal.mail.yahoo.com/


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================