[FW-1] VPN and ClusterXL issue

[Leonardo Boulton <lboulton@FW1-NOSPAMCYBERTECHPROJECTS.COM>]

Hi gurus,

I have a Check Point NG FP3 Cluster XL on two Solaris 8 boxes (in Load
Sharing). The cluster operates just fine as a firewall. Last week I
wanted to implement a VPN tunnel between my office and a partner Check
Point Firewall.

I'm having trouble with the SA tables synchronization or something like
that. Once the tunnel is up, one of the member exchanges keys, and
encrypts the first packets. If a session tries to go through the other
member, then the packet is drop as "there is no valid SA", and the
session is droped. Sucesive sessions that are supposed to go through the
VPN tunnel are succesful as long as they are handled by the first
module. So I got an intermittent VPN tunnel!, a 50% chance of going
through.

If I cpstop one of the cluster members, the VPN tunnel works great.

What can be happening here?. Suggestions?.

Thanks.

L

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================