Re: [FW-1] HA on NG FP1 not working

[Luciano Cota Kahn <LKAHN@FW1-NOSPAMPACTUAL.COM.BR>]

Hi,

I just realized the problem. The standby firewall was not routing the
packets. Enabling Iprouting on the registry did the trick.

Thanks,

Luciano Kahn
Banco Pactual S.A
Area de Sistemas
Tel: (21) 2514-9898
Fax: (21) 2514-8898


> -----Original Message-----
> From: James Schnack [mailto:acrux14@HOTMAIL.COM]
> Sent: terca-feira, 2 de abril de 2002 18:32
> To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
> Subject: Re: [FW-1] HA on NG FP1 not working
>
>
> Just a few ideas off the top of my head:
>
> - Enable HA from cpconfig
> - Enable Gateway Clusters (from the GUI), create GW Cluster
> object and add
> FW objects to it.
> - Define sync networks in the GW Cluster object's
> Synchronization option
> window. Verify sync traffic is being exchanged in this
> network by sniffing
> for port 8116/tcp traffic (is the port number right? Pls check...)
> - After that, check that the number of connections in each FW
> is *roughly*
> the same with the fw tab command.
>
> Hope it helps.
>
> Regards,
>
> J.
>
>
> >I am trying to use Checkpoint High Availability (CPHA) but it's not
> >working.
> >Looks like the connections are not "taken over" by the
> standby firewall. I
> >am using Checkpoint NG FP1 and Windows 2000. Any ideas?
> >
>
>
> _________________________________________________________________
> MSN Photos is the easiest way to share and print your photos:
> http://photos.msn.com/support/worldwide.aspx
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================
>


---------------------------------------------------

Esta mensagem contem informacoes confidenciais e foi enviada somente ao(s) destinatario(s) acima. Caso voce nao seja a pessoa enderecada, nao devera divulgar, distribuir ou copiar esta mensagem. Se voce a recebeu por engano, favor notificar imediatamente o remetente atraves do telefone (55) (21) 2514-9600 e em seguida destrui-la.

This message contains confidential information and is intended only for the individual named. If you are not the addressee you should not disseminate, distribute or copy this message. Please notify the sender immediately by the telephone number (55) (21) 2514-9600 if you have received this message by mistake and then destroy it.

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================