[FW-1] High Availability

[Scott Kellerman <whitedog2000@FW1-NOSPAMHOTMAIL.COM>]

Hi,

I'm trying to set up Checkpoints High Availability.  I'm running 4.1 on
solaris 2.7.  The inside network is on a non-routeable subnet, so I'm doing
static nat to get a FTP server on the inside network.  in order to make it
work, I must do a arp statement ( arp -s 203.111.111.111 192.168.189.111
pub) on both firewalls.  Everything is set up, and I can fail over with out
a problem.  My problem is that from time to time I loose connectivity with a
FTP session from the outside.  When I look at the logs, it says "unknown
established TCP packet".  I guess my question is....when I put the arp
statement on both the primary and the secondary firewalls, are both
firewalls advertising with the arp statement that they will take care of the
packet going to the internal FTP server ?  When I snoop the outside
interfaces on both machines, and ping the FTP server, the primary firewall
shows "requests and reply's", and the secondary firewall just shows
"requests"

any help, or a place to get good info for HA would be great..

Thanks !

_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

===============================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
===============================================