NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] Going HA



I asked Nokia cos I wasn't sure...


Hi Jim, In regards to case 108673, you asked if the VIP address has to be in
the same subnet as the real IP addresses of the 2 appliances. The answer is
yes, the VIP address must be part of the same subnet as the physical IP
addresses of both appliances.

----- Original Message -----
Subject: Re: [FW-1] Going HA


> Do the outside physical addresses of the machines have to be public?  Can
you get away with one public address (cluster) and two private?
>
> j
>
> -----Original Message-----
> From: Bill Osterman [mailto:[email protected]]
> Sent: 11 May 2002 01:59
> To: [email protected]
> Subject: Re: [FW-1] Going HA
>
>
> In the Nokia world, you will be using "monitored circuit" which is VRRP
> (virtual router redundancy protocol -- or something very close) combined
> with the ability to fail over multiple interfaces when one fails.  This is
> important in a stateful firewall environment where return packets might
get
> dropped if they return to the "other" firewall in your HA pair where they
> will be dropped.
>
> You will need an actual ip address for each Nokia box on each network
where
> you want a redundant (virtual) ip address.  In a simple situation, you
would
> have an outside network (the Internet) and an inside network (corporate).
> For the outside network, you would need one ip address for each of the
Nokia
> boxes and another for the virtual ip address.  That is three ip addresses.
> On the inside it would be the same.
>
>
> ----- Original Message -----
> From: "Kalpesh Patel" <[email protected]>
> To: <[email protected]>
> Sent: Friday, May 10, 2002 7:02 PM
> Subject: [FW-1] Going HA
>
>
> > I'm upgrading from Checkpoint 4.1 to NG soon, Looking to go HA on the
> Nokia
> > Boxes.  I've been told that I need a second external IP for the second
> > Nokia box, in order to go HA and for it to do the fail over,   Is this
> > true?
> >
> > Thanks
> > Kalps
> >
> > "This email and any attachments is intended for the addressee only. It
may
> > contain confidential, proprietary or legally privileged information and
> any
> > views or opinions presented are solely those of the author. If you are
not
> > the addressee you have received this e-mail in error. Please notify the
> > sender by return e-mail and then destroy it. If you have received this
> > e-mail in error, copying, printing, forwarding or dissemination of this
> > e-mail is strictly prohibited. We virus scan all e-mails but are not
> > responsible for any damage caused by a virus or alteration by a third
> party
> > after it is sent.
> >
> > Website: http://www.kingston.com/europe
> >
> > Registered in England, No: 3643195     VAT No: GB 720 5258 60"
> >
> > =================================================
> > To set vacation, Out Of Office, or away messages,
> > send an email to [email protected]
> > in the BODY of the email add:
> > set fw-1-mailinglist nomail
> > =================================================
> > To unsubscribe from this mailing list,
> > please see the instructions at
> > http://www.checkpoint.com/services/mailing.html
> > =================================================
> > If you have any questions on how to change your
> > subscription options, email
> > [email protected]
> > =================================================
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.