NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] Incomplete MAC address w/ NG AI cluster



What does the "<incomplete>" means ? Ahhhh ... good question. It means the
requesting client made an ARP REQUEST, but got nothing.

So ... Let's try sniffing! On the firewall (clustered one, and master if
possible), just sniff what's coming in. You should see things like :

"ARP REQUEST FOR .yyy.zzz.aaa" followed by "ARP REPLY FOR ....".

Watch for that. And let's speak later!

JF

On Wed, 8 Oct 2003, Dominic Legault wrote:

> Hi everyone,
>
> We've setup a Win2K-based NG AI cluster and have established multiple VPNs
> on outside and inside virtual interfaces. The problem is that it doesn't
> work for one inside virtual interface; both nodes are connected directly to
> a Cisco 2950 switch running the latest IOS, with no VLANs or any special
> configuration. This switch is in turn directly connected to another
> (non-clustered) firewall.
>
> I can ping both cluster nodes individually from the latter and from the
> switch itself, but not the cluster address. A sh arp on the switch shows the
> cluster MAC address as incomplete. I've tried adding a static arp entry, to
> no avail. As long as this situation continues I can't get my last VPN tunnel
> to work. Any insights on this? Thanks.
>
> Dominic Legault (CCNA, MCSE, MCSA)
> Technology Analyst
> LGS Group Inc / IBM Global Services
> [email protected]
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================
>

--
Jean-Francois Gobin - Administrateur gobinjf.be
http://www.gobinjf.be   mailto:[email protected]

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.