| |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW-1] FW-1-MAILINGLIST Digest - 16 Dec 2001 to 17 Dec 2001 ( #2001-76)
Aengus,
First, you can re-create the new license for the firewall without
affecting your existing license/vpn, you'll simply just apply the license
when the time to permanently cut-over arrives. One thing I'd suggest is to
get a copy of the original lic before you relicense it. Just in case you
run into any problems and need to re-install the old lic while you work out
such. Essentially, if I'm understanding your scenario correctly, regardless
of when you do the cut-over you will still need the remote side online to
make modifications and re-synch keys. If you think about it you've
established a VPN between yourself and your partner using your current
external ip, as such this is what they have defined for you on the remote
side as the VPN endpoint and it's corresponding encryption domain. In order
for you to do the VPN cut-over it would still require them to make
modifications on their side in order to swap VPN endpoints, as well as on
your side. Essentially it still requires you to have them online so you
don't really gain much by trying to jump a step ahead before you swap fully
from one ISP to the other.
just my opinion, anyone else?
----- Original Message -----
From: <[email protected]>
To: <[email protected]>
Sent: Wednesday, December 19, 2001 1:40 PM
Subject: Re: [FW-1] FW-1-MAILINGLIST Digest - 16 Dec 2001 to 17 Dec 2001 (
#2001-76)
> Hi, We are currently switching from one ISP to another and we have both
> connections at different interfaces on our Nokia 440. (checkpoint 4.1
> sp3).
>
> What I would like to do is switch things over one item at a time and then
> finally cut completely over from the current ISP to the new ISP.
>
> There is one item I need to cut over that I am not sure if I can do ahead
> of the final cutover.
>
> Eventually at the final cut over phase I will need to re-license to the
new
> IP on the outside interface of my new ISP for encryption purposes.
>
> I have an existing firewall to firewall VPN with a vendor and I was
curious
> if I can cut that over to the new ISP before I do the re-liscensing. I
> guess what I am really asking is would I have to go through the trouble of
> calling the far end and re-synching shared keys again if I re-license to
my
> new IP address. If I do then I dont gain anything by cutting over prior
to
> the final step since I will need the vendor online for the cut over.
>
> Any advice would be appreciated.
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
|
|
