[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] Issues with VRRP IPSO 3.7 and NG AI
Thanks for all of the suggestions. I've been through them and unfortunately they have not applied to our situation. When we look a Nokias we can see that the VRRP is working for the external interfaces, the node with the higher priority is master and the other is in backup. However, for all the other interfaces, they are both in the state of master. I'm wondering if it is something to do with how the topology is defined. We've tried following the instructions and defining the topolgy on the cluster object and also we've tried the older approach of defining it on the cluster members. Neither has made any difference. Its strange thats it working for just one of the interfaces (well actually two of them, as presumably the state sync interface is working OK too). Mark -----Original Message----- From: Evans, Gareth (Gamer.tv) [mailto:[email protected]] Sent: 10 September 2003 17:51 To: [email protected] Subject: Re: [FW-1] Issues with VRRP IPSO 3.7 and NG AI Yup I have it working, with legacy vrrp implementation and traditional policy. Cheers, Gareth -----Original Message----- From: Mark Pays [mailto:[email protected]] Sent: 10 September 2003 17:22 To: [email protected] Subject: Re: [FW-1] Issues with VRRP IPSO 3.7 and NG AI thanks for the reply. We already have a rule to allow the traffic and can see it passing between the Nokias. It just wont work!! Does anyone actually have IPSO 3.7/NG AI/VRRP HA working? Be interested to hear if you do.........As I said we have an identical setup working just fine in IPSO 3.6/NG FP3. -----Original Message----- From: Hennessy, Robert [mailto:[email protected]] Sent: 10 September 2003 16:41 To: [email protected] Subject: Re: [FW-1] Issues with VRRP IPSO 3.7 and NG AI Mark, I have only read the docs, no experience, but ipso 3.6 permits vrrp packets between nokia's without any rule. v.7 requires a rule to permit the packets for the backup to go into backup mode. For testing, maybe permit the vrrp interfaces to talk on any port and narrow the ports down if it works Rob -----Original Message----- From: Mark Pays [mailto:[email protected]] Sent: Wednesday, September 10, 2003 10:25 AM To: [email protected] Subject: [FW-1] Issues with VRRP IPSO 3.7 and NG AI Hi, We are trying to setup a VRRP HA pair using IPSO 3.7 and NG AI on nokia. We can get the VRRP working on IPSO before Checkpoint is installed, but once we create a cluster object and install a policy the problems begin. We have used Nokia legacy vrrp configuration rather than the newer ISPO cluster option. Has anyone actaully got this VRRP HA working? We find in Smart View staus the first node is OK, but the second always shows problems under clusterXL and the node is shown as down. Unfortunately neither the Smartview or the logs suggest what the issue may be. We have exactly mirrored another working vrrp setup. The only difference is that this is on FP3 and is using IPSO 3.6. Does anyone have any experience of VRRP on IPSO 3.7 or NG AI, any suggestions would be useful...... Thanks Mark ########################################### This message has been scanned by F-Secure Anti-Virus for Microsoft Exchange. For more information, connect to http://www.F-Secure.com/ ---------------------------------------------------------------------------- -- The opinions expressed within this email represent those of the individual and not necessarily those of Gullivers Travel Associates (GTA). This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify [email protected]. Should you wish to use email as a form of communication, GTA are unable to guarantee the security of email content outside of our own computer systems. ________________________________________________________________________ This email has been scanned for all viruses by the MessageLabs Email Security System. For more information on a proactive email security service working around the clock, around the globe, visit http://www.messagelabs.com ________________________________________________________________________ ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= <font face="Times New Roman" size="3"> <p>------------------------------------------------------------------------- -----</p> <p> This e-mail may be privileged and/or confidential, and the sender does not waive any related rights and obligations. Any distribution, use or copying of this e-mail or the information it contains by other than an intended recipient is unauthorized. If you received this e-mail in error, please advise me (by return e-mail or otherwise) immediately.</p> <p> Ce courriel est confidentiel et protégé. L'expéditeur ne renonce pas aux droits et obligations qui s'y rapportent. Toute diffusion, utilisation ou copie de ce message ou des renseignements qu'il contient par une personne autre que le (les) destinataire(s) désigné(s) est interdite. Si vous recevez ce courriel par erreur, veuillez m'en aviser immédiatement, par retour de courriel ou par un autre moyen.</p> <p>====================================================</p> </font> ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ########################################### This message has been scanned by F-Secure Anti-Virus for Microsoft Exchange. For more information, connect to http://www.F-Secure.com/ ________________________________________________________________________ This email has been scanned for all viruses by the MessageLabs Email Security System. For more information on a proactive email security service working around the clock, around the globe, visit http://www.messagelabs.com ________________________________________________________________________ ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= DISCLAIMER - The preceding e-mail message (including any attachments) contains information that may be confidential, may be protected by the attorney-client or other applicable privileges, or may constitute non-public information. It is intended to be conveyed only to the designated recipient(s) named above. If you are not an intended recipient of this message, please notify the sender by replying to this message and then delete all copies of it from your computer system. Any use, dissemination, distribution, or reproduction of this message by unintended recipients is not authorized and may be unlawful. The contents of this communication do not necessarily represent the views of this company. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ########################################### This message has been scanned by F-Secure Anti-Virus for Microsoft Exchange. For more information, connect to http://www.F-Secure.com/ ________________________________________________________________________ This email has been scanned for all viruses by the MessageLabs Email Security System. For more information on a proactive email security service working around the clock, around the globe, visit http://www.messagelabs.com ________________________________________________________________________ ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|