NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] High Availability



www.hanetworks.com

-----Original Message-----
From: Scott Kellerman [mailto:[email protected]]
Sent: 13 November 2001 15:14
To: [email protected]
Subject: [FW-1] High Availability


Hi,

I'm trying to set up Checkpoints High Availability.  I'm running 4.1 on
solaris 2.7.  The inside network is on a non-routeable subnet, so I'm doing
static nat to get a FTP server on the inside network.  in order to make it
work, I must do a arp statement ( arp -s 203.111.111.111 192.168.189.111
pub) on both firewalls.  Everything is set up, and I can fail over with out
a problem.  My problem is that from time to time I loose connectivity with a
FTP session from the outside.  When I look at the logs, it says "unknown
established TCP packet".  I guess my question is....when I put the arp
statement on both the primary and the secondary firewalls, are both
firewalls advertising with the arp statement that they will take care of the
packet going to the internal FTP server ?  When I snoop the outside
interfaces on both machines, and ping the FTP server, the primary firewall
shows "requests and reply's", and the secondary firewall just shows
"requests"

any help, or a place to get good info for HA would be great..

Thanks !

_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

===============================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
===============================================



The information in this Internet E-mail is confidential and is intended
solely for the addressee. Access, copying or re-use of information in it by
anyone else is unauthorized. Any views or opinions presented are solely
those of the author and do not necessarily represent those of TWI, TWIi,
IMG, PCC, NOW or any of their affiliates. If you are not the intended
recipient please contact [email protected] and delete this email
immediately.

===============================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
===============================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.