NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] NG AI VRRP Anti-Spoofing


  • To: [email protected]
  • Subject: Re: [FW-1] NG AI VRRP Anti-Spoofing
  • From: David Beattie <[email protected]>
  • Date: Wed, 30 Jul 2003 13:20:44 +0100
  • Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
  • Sender: Mailing list for discussion of Firewall-1 <[email protected]>
  • Thread-index: AcNSqMjgbDFeIvtPQv6MH20Sfl/Z7wD6//Sg
  • Thread-topic: [FW-1] NG AI VRRP Anti-Spoofing

The only way that I have been able to get around this as a short term fix is to remove VRRP entirely!

More thought/investigation required.

Dave

-----Original Message-----
Subject: Re: [FW-1] NG AI VRRP Anti-Spoofing


Dave,

I am also having the same problem with my IP 350's the primary will core
dump when I plug in the secondary firewall....    I think we are going to
find a patch come out soon for this  I have been working with nokia for the
better part of a week to get this running

thanks

Alan Cupernall
 Server Specialist
 Kinney Drugs Inc.
 [email protected]

 -----Original Message-----
Subject:        [FW-1] NG AI VRRP Anti-Spoofing

Dear All,

I am trying to get a pair of Nokia IP440's up and running as a VRRP pair
running Firewall-1 NG-AI. This is a very simple scenario with two 4-port
NICs in each, No NAT, No VPNs, No SecuRemote/Client.

All looks fine until I try to put Anti-Spoofing on, then it complains that
some of the VRRP packets are coming in from the wrong interface
intermittently. When running traffic across the system it also shows traffic
intermittently coming into the wrong interface. It even continues to report
Anti-Spoofing events when I turn all anti-spoofing checks off.

When I run the primary firewall by itself, everything behaves properly, but
everything seems to grind to a halt when I start the second firewall.

Has anyone heard of IPSO 3.7 or NG-AI behaving like this, or have any ideas
about how to troubleshoot it?

Thanks

Dave Beattie

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.