[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] Going HA
I asked Nokia cos I wasn't sure... Hi Jim, In regards to case 108673, you asked if the VIP address has to be in the same subnet as the real IP addresses of the 2 appliances. The answer is yes, the VIP address must be part of the same subnet as the physical IP addresses of both appliances. ----- Original Message ----- Subject: Re: [FW-1] Going HA > Do the outside physical addresses of the machines have to be public? Can you get away with one public address (cluster) and two private? > > j > > -----Original Message----- > From: Bill Osterman [mailto:[email protected]] > Sent: 11 May 2002 01:59 > To: [email protected] > Subject: Re: [FW-1] Going HA > > > In the Nokia world, you will be using "monitored circuit" which is VRRP > (virtual router redundancy protocol -- or something very close) combined > with the ability to fail over multiple interfaces when one fails. This is > important in a stateful firewall environment where return packets might get > dropped if they return to the "other" firewall in your HA pair where they > will be dropped. > > You will need an actual ip address for each Nokia box on each network where > you want a redundant (virtual) ip address. In a simple situation, you would > have an outside network (the Internet) and an inside network (corporate). > For the outside network, you would need one ip address for each of the Nokia > boxes and another for the virtual ip address. That is three ip addresses. > On the inside it would be the same. > > > ----- Original Message ----- > From: "Kalpesh Patel" <[email protected]> > To: <[email protected]> > Sent: Friday, May 10, 2002 7:02 PM > Subject: [FW-1] Going HA > > > > I'm upgrading from Checkpoint 4.1 to NG soon, Looking to go HA on the > Nokia > > Boxes. I've been told that I need a second external IP for the second > > Nokia box, in order to go HA and for it to do the fail over, Is this > > true? > > > > Thanks > > Kalps > > > > "This email and any attachments is intended for the addressee only. It may > > contain confidential, proprietary or legally privileged information and > any > > views or opinions presented are solely those of the author. If you are not > > the addressee you have received this e-mail in error. Please notify the > > sender by return e-mail and then destroy it. If you have received this > > e-mail in error, copying, printing, forwarding or dissemination of this > > e-mail is strictly prohibited. We virus scan all e-mails but are not > > responsible for any damage caused by a virus or alteration by a third > party > > after it is sent. > > > > Website: http://www.kingston.com/europe > > > > Registered in England, No: 3643195 VAT No: GB 720 5258 60" > > > > ================================================= > > To set vacation, Out Of Office, or away messages, > > send an email to [email protected] > > in the BODY of the email add: > > set fw-1-mailinglist nomail > > ================================================= > > To unsubscribe from this mailing list, > > please see the instructions at > > http://www.checkpoint.com/services/mailing.html > > ================================================= > > If you have any questions on how to change your > > subscription options, email > > [email protected] > > ================================================= > > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|