[FW-1] [FW1] Check Point HA Cluster NG

[Emmanuel Bailleul <emmanuel.bailleul@FW1-NOSPAMADILAN.FR>]

Hi,

With 4.1, the heartbeat protocol, UDP 8116, used specific MAC adresses like 0:0:0:0:fe:0 (for the primary) and 0:0:0:0:fe:1 (for the backup), that are independant of the clusterID. This implied that two clusters could not be plugged on the same LAN switches without filtering. Moreover Check Point claimed that such a configuration was not supported in that version.

I was just wondering if NG will still work the same way or if there is something new, like the possibility to change these MACs throughout the clusters on the same LAN.

Thx for your help.

Emmanuel BAILLEUL
Responsable du Pôle Sécurité
Agence Annecy Sud-Est
ascom adilan
Network Integration
emmanuel.bailleul@adilan.fr <mailto:emmanuel.bailleul@adilan.fr>
14 rue du Pré Paillard
74940 Annecy le Vieux
Tel: 33 4 50 64 02 49
Fax : 33 4 50 64 09 98
<http://www.adilan.fr>

"S'il n'y a pas de solution, c'est qu'il n'y a pas de problème" - Devise Shadock