Re: [FW-1] VRRP broadcast pollution

[Ralf Guenthner <gue@FW1-NOSPAMALPHATEL.DE>]

----- Original Message -----
From: "Reinhard Stich" <r.stich@INTERNET-SECURITY.AT>
To: <FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM>
Sent: Wednesday, July 09, 2003 2:44 PM
Subject: Re: [FW-1] VRRP broadcast pollution


> you need this VRRP-traffic on every interface where you have a
> cluster-IP-address configured (on the external, on the internal, in the
DMZ
> and so on).
>
> the dedicated link (I guess) is for fw1-state-synchronisation, this is
> important too but has nothing to do with vrrp. only vrrp and
fw1-state-sync
> together are a good HA-solution.
>
> cheers
> reinhard

Reinhard,

so the only choice I have is to block those packets at the entry-point
(router) to our LAN, correct? I don't know about you, but I always strive
to reduce network traffic whenever possible. These packets are only needed
by the firewalls, but they travel around the whole network. I don't like
that <s>

Thanks for your answer.

Cheers
Ralf

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================