| |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[FW-1] NG AI VRRP Anti-Spoofing
- To: [email protected]
- Subject: [FW-1] NG AI VRRP Anti-Spoofing
- From: David Beattie <[email protected]>
- Date: Fri, 25 Jul 2003 12:41:36 +0100
- Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
- Sender: Mailing list for discussion of Firewall-1 <[email protected]>
- Thread-index: AcNSh21uYQS5/HFnRDO/LzONf+2YiQAGMfLQ
- Thread-topic: [FW-1] telnet problem between cluster members
Dear All,
I am trying to get a pair of Nokia IP440's up and running as a VRRP pair running Firewall-1 NG-AI. This is a very simple scenario with two 4-port NICs in each, No NAT, No VPNs, No SecuRemote/Client.
All looks fine until I try to put Anti-Spoofing on, then it complains that some of the VRRP packets are coming in from the wrong interface intermittently. When running traffic across the system it also shows traffic intermittently coming into the wrong interface. It even continues to report Anti-Spoofing events when I turn all anti-spoofing checks off.
When I run the primary firewall by itself, everything behaves properly, but everything seems to grind to a halt when I start the second firewall.
Has anyone heard of IPSO 3.7 or NG-AI behaving like this, or have any ideas about how to troubleshoot it?
Thanks
Dave Beattie
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
|
|
