NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[FW-1] Using Backup VRRP for static NAT - Nokia HA



Because of problems with our switch not handling both primary and secondary
firewalls responding to arp requests(switch would store the last reply
only), I was requested to move my proxy-arp IPs to backup VRRP IPs.  I have
approximately seven of these.  All of them work now, except my static IP for
incoming/outgoing mail.  Outgoing mail, originating from inside the firewall
works fine.  Incoming mail, originating from the outside, does not.  I get
syn requests coming in, but the firewall does not respond.  It appears to be
logging them as accepted, but they go nowhere.  I am very confused.  If I
pull it out of the VRRP backup, and create a proxy-arp address for it,
everything starts working again.  Anyone have any clues?  Thanks for any
input.

-Aaron

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents � 2003 Network Presence, LLC. All rights reserved.