Re: [FW-1] Configuring Cluster of NOKIA

[Security Operation Center <cmaxsoc@FW1-NOSPAMHOTMAIL.COM>]

Simon,

You can user IP clustering feature in IPSo 3.6 but only in multicast mode
and in IPSO 3.7 in both multicast nad forwarding mode.
Now to your question , for configuring the IP clustering or VRRP , you have
to define on cluster IP or VRRP IP so that both the nokia box will share the
IP and the hosts should keep this IP as their gateway.For assigning the IP
to internal you can use 10.1.1.103/24 or for secure segment you can use
172.16.2.3/16.

I hope this help you,

Regards,
Atul Dalal

----- Original Message -----
From: "Simonetta Lovallo" <s.lovallo@EXOSERVICE.IT>
To: <FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM>
Sent: Friday, July 18, 2003 8:45 PM
Subject: [FW-1] Configuring Cluster of NOKIA


> I'm going to configure 2 Nokia IP530 in cluster. The configuration is :
> IPSO 3.6
> Checkpoint VPN Firewall-1 NG FP3
> I was told that with IPSO 3.6 I have to use VRRP to configure the 2 NOKIA
IP in high availability.
>
> With IPSO 3.7 I know that I may turn off VRRP and activate The NOKIA
Clustering Feature.
>
> I don't know how many IP address have to assign to each interface of the 2
gateways.
> With NT and Sun Solaris they share the same IP address on each interface.
For example
> node 1 has
> 10.1.1.101/24 on internal interface
> 213.25.25.124/24 on external interface
> 172.16.2.1/16 on secure segment
>
> node 2 will have  172.16.2.2/16 on secure segment
>
> and what IP address will I have to assign to internal interface and
external of node 2? the same IP address or a different one?
>
>
> Could anyone help me?
>
> Thanks
> Simon
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV@amadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================
>

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================