[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] RE: [FW1] high availability
Casey, You are trying to implement a site redundancy type of an HA solution within your local network. Most HA solutions presume a single footprint for the redundant system, i.e. some form of floating IP address. HSRP should probably still run your routers in order to achieve redundancy at the particular point of failure, but the only way you will be able to implement the scenario you are looking at, will be through some routing protocol, although you will most probably have to concede the transparent fail-over option. On the other hand, you can consider the solution where your front-end routers make the decision between the two touch points and have your traffic run through a pair of HA firewalls. You can certainly make your firewall support multiple segments on the same physical interface for migration purposes, but you are better off re-routing at the back end routers. Let me know how it goes. Cheers. George -----Original Message----- From: Casey DeBerry [mailto:[email protected]] Sent: Thursday, July 19, 2001 12:58 PM To: [email protected] Subject: [FW1] high availability i am looking for some information on high availability.. basically, i have two firewalls on different segments that will be acting as backups for each other. if FW1 were to fail, HSRP would route its network traffic to FWB... is there a solution out there besides stonebeat? will stonebeat accomplish this? thanks, Casey DeBerry [email protected] ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== _____________________________________________________________________ IMPORTANT NOTICES: This message is intended only for the addressee. Please notify the sender by e-mail if you are not the intended recipient. If you are not the intended recipient, you may not copy, disclose, or distribute this message or its contents to any other person and any such actions may be unlawful. Banc of America Securities LLC("BAS") does not accept time sensitive, action-oriented messages or transaction orders, including orders to purchase or sell securities, via e-mail. BAS reserves the right to monitor and review the content of all messages sent to or from this e-mail address. Messages sent to or from this e-mail address may be stored on the BAS e-mail system. ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|