[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [FW-1] Using Backup VRRP for static NAT - Nokia HA
Because of problems with our switch not handling both primary and secondary firewalls responding to arp requests(switch would store the last reply only), I was requested to move my proxy-arp IPs to backup VRRP IPs. I have approximately seven of these. All of them work now, except my static IP for incoming/outgoing mail. Outgoing mail, originating from inside the firewall works fine. Incoming mail, originating from the outside, does not. I get syn requests coming in, but the firewall does not respond. It appears to be logging them as accepted, but they go nowhere. I am very confused. If I pull it out of the VRRP backup, and create a proxy-arp address for it, everything starts working again. Anyone have any clues? Thanks for any input. -Aaron ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|