Re: [FW-1] Going HA

[Bill Osterman <wosterman1@FW1-NOSPAMCOMCAST.NET>]

In the Nokia world, you will be using "monitored circuit" which is VRRP
(virtual router redundancy protocol -- or something very close) combined
with the ability to fail over multiple interfaces when one fails.  This is
important in a stateful firewall environment where return packets might get
dropped if they return to the "other" firewall in your HA pair where they
will be dropped.

You will need an actual ip address for each Nokia box on each network where
you want a redundant (virtual) ip address.  In a simple situation, you would
have an outside network (the Internet) and an inside network (corporate).
For the outside network, you would need one ip address for each of the Nokia
boxes and another for the virtual ip address.  That is three ip addresses.
On the inside it would be the same.


----- Original Message -----
From: "Kalpesh Patel" <KPatel@KINGSTON-TECHNOLOGY.COM>
To: <FW-1-MAILINGLIST@beethoven.us.checkpoint.com>
Sent: Friday, May 10, 2002 7:02 PM
Subject: [FW-1] Going HA


> I'm upgrading from Checkpoint 4.1 to NG soon, Looking to go HA on the
Nokia
> Boxes.  I've been told that I need a second external IP for the second
> Nokia box, in order to go HA and for it to do the fail over,   Is this
> true?
>
> Thanks
> Kalps
>
> "This email and any attachments is intended for the addressee only. It may
> contain confidential, proprietary or legally privileged information and
any
> views or opinions presented are solely those of the author. If you are not
> the addressee you have received this e-mail in error. Please notify the
> sender by return e-mail and then destroy it. If you have received this
> e-mail in error, copying, printing, forwarding or dissemination of this
> e-mail is strictly prohibited. We virus scan all e-mails but are not
> responsible for any damage caused by a virus or alteration by a third
party
> after it is sent.
>
> Website: http://www.kingston.com/europe
>
> Registered in England, No: 3643195     VAT No: GB 720 5258 60"
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================