NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [FW1] IPSO VRRP issue



Same problem here but I can't don't anything else: telnet, ftp, Voyager...

When I try to access the VRRP address, I can see the arp entry on the host
arp table but no reply...

Any ideas?

Francisco

-----Original Message-----
From: Dave Dunaway (ncc0296) [mailto:[email protected]]
Sent: Tuesday, January 09, 2001 9:43 PM
To: [email protected]
Subject: Re: [FW1] IPSO VRRP issue




Thanks to all who replied. I'm currently upgrading my boxes to 3.3 :)

On Mon, Jan 08, 2001 at 03:45:14PM -0800, Konstantin Matev wrote:
> Then upgrade to IPSO 3.3.x and you should be able to ping the VIP address.
> It is an option supported in IPSO 3.3.0.
> 
> -Dex
> 
> -----Original Message-----
> From: Dave Dunaway (ncc0296) [mailto:[email protected]]
> Sent: Monday, January 08, 2001 3:12 PM
> To: Vince Kornacki
> Cc: 'Chris Arnold'; [email protected]
> Subject: Re: [FW1] IPSO VRRP issue
> 
> 
> 
> 
> Er...ok, but in the case where my cisco 6509 using msfc won't add an entry
> in its arp table because it can't ping the VRRP vip....what then? :)
> Any ideas? 
> 
> On Fri, Jan 05, 2001 at 04:58:54PM -0600, Vince Kornacki wrote:
> > Chris, 
> > 
> > Per RFC 2338, VRRP VIPs are not required to respond to echo-requests
> > (pings). 
> > 
> > Hope this helps. 
> > 
> > Vince Kornacki 
> > 
> > -----Original Message----- 
> > From: Chris Arnold [ mailto:[email protected]
> > <mailto:[email protected]> ] 
> > Sent: Friday, January 05, 2001 4:29 PM 
> > To: [email protected] 
> > Subject: [FW1] IPSO VRRP issue 
> > 
> > 
> > 
> > Hello.  I just did the initial VRRP configuration on a pair of Nokias
> > (IPSO 
> > 3.2.1).  I followed the instructions in Nokia's knowledgebase and it 
> > appeared to be correct.  I'm seeing the VRRP traffic allowed in the FW
> > log 
> > (CP 4.1 sp2) and netstat -rn and ifconfig -a from the command line(s)
> > show 
> > the virtual IP address (and fail-over appears to work) but I can't ping
> > it. 
> > There are no CP rules blocking this.  Any thoughts? 
> > 
> > Thanks. 
> > 
> > Chris 
> > 
> > 
> > ========================================================================
> > ======== 
> >      To unsubscribe from this mailing list, please see the instructions
> > at 
> >                http://www.checkpoint.com/services/mailing.html
> > <http://www.checkpoint.com/services/mailing.html>  
> > ========================================================================
> > ======== 
> > 
> 
> -- 
> Dave Dunaway [[email protected]]
> 
> 
>
============================================================================
> ====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
>
============================================================================
> ====

-- 
Dave Dunaway [[email protected]]
Systems Administrator, AT&T Canada, IES
tel:, fax:============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.