[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] NG AI VRRP Anti-Spoofing
The only way that I have been able to get around this as a short term fix is to remove VRRP entirely! More thought/investigation required. Dave -----Original Message----- Subject: Re: [FW-1] NG AI VRRP Anti-Spoofing Dave, I am also having the same problem with my IP 350's the primary will core dump when I plug in the secondary firewall.... I think we are going to find a patch come out soon for this I have been working with nokia for the better part of a week to get this running thanks Alan Cupernall Server Specialist Kinney Drugs Inc. [email protected] -----Original Message----- Subject: [FW-1] NG AI VRRP Anti-Spoofing Dear All, I am trying to get a pair of Nokia IP440's up and running as a VRRP pair running Firewall-1 NG-AI. This is a very simple scenario with two 4-port NICs in each, No NAT, No VPNs, No SecuRemote/Client. All looks fine until I try to put Anti-Spoofing on, then it complains that some of the VRRP packets are coming in from the wrong interface intermittently. When running traffic across the system it also shows traffic intermittently coming into the wrong interface. It even continues to report Anti-Spoofing events when I turn all anti-spoofing checks off. When I run the primary firewall by itself, everything behaves properly, but everything seems to grind to a halt when I start the second firewall. Has anyone heard of IPSO 3.7 or NG-AI behaving like this, or have any ideas about how to troubleshoot it? Thanks Dave Beattie ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|