[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] High Availability
www.hanetworks.com -----Original Message----- From: Scott Kellerman [mailto:[email protected]] Sent: 13 November 2001 15:14 To: [email protected] Subject: [FW-1] High Availability Hi, I'm trying to set up Checkpoints High Availability. I'm running 4.1 on solaris 2.7. The inside network is on a non-routeable subnet, so I'm doing static nat to get a FTP server on the inside network. in order to make it work, I must do a arp statement ( arp -s 203.111.111.111 192.168.189.111 pub) on both firewalls. Everything is set up, and I can fail over with out a problem. My problem is that from time to time I loose connectivity with a FTP session from the outside. When I look at the logs, it says "unknown established TCP packet". I guess my question is....when I put the arp statement on both the primary and the secondary firewalls, are both firewalls advertising with the arp statement that they will take care of the packet going to the internal FTP server ? When I snoop the outside interfaces on both machines, and ping the FTP server, the primary firewall shows "requests and reply's", and the secondary firewall just shows "requests" any help, or a place to get good info for HA would be great.. Thanks ! _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp =============================================== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html =============================================== The information in this Internet E-mail is confidential and is intended solely for the addressee. Access, copying or re-use of information in it by anyone else is unauthorized. Any views or opinions presented are solely those of the author and do not necessarily represent those of TWI, TWIi, IMG, PCC, NOW or any of their affiliates. If you are not the intended recipient please contact [email protected] and delete this email immediately. =============================================== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ===============================================
|