We are running IOS 12.1(8b)E9 and HSRP on some devices. The vendor's router
IOS version is not known.
Basically, the active firewall responds to ARPs for the virtual with it's
own mac addresses. We have not had any issues activating the standby router.
We also have manual NAT entries that work fine.
------- Original Message --------
From: Riccardo Baldanzi (Hawk) [mailto:riccardo.baldanzi AT libero DOT it]
Sent: Wednesday, May 07, 2003 4:28 AM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Cc: Lancer
Subject: Re: [FW-1] Cluster XL HA and Cisco IOS 12.1 with HSRP
Lancer,
i'm using high availabity but our Cisco routers with 12.1.5.T8 doesn't
refresh NATted MAC address...
it's strange because they refresh Virtual IP associated to cluster object.
Which IOS version are you running? Are you using HSRP?
Thanks
Rick
At 19.00 06/05/2003, Lancer wrote:
>If you are using load-sharing with multicast mac addresses Cisco routers
>require static ARP entries. We had to switch to high availability, which
>uses unicast, because of on-site routers we do not manage. We are running
NG
>FP3 HF1 and understand this issue will be addressed in an upcoming release.
>
>Cisco supports RFC 1812, section 3.3.2, which essentially says to ignore
ARP
>replies with broadcast or multicast mac addresses.
>
>
>
>------- Original Message --------
>From: "sonoro"
>To: "FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM"
>CC:
>Subject: Re: [FW-1] Cluster XL HA and Cisco IOS 12.1 with HSRP
>Date: 06/05/03
>
>On Tue, 6 May 2003 16:37:59 +0200
>"Riccardo Baldanzi (Hawk)" wrote:
>
> > Have ever had this problem?
>
>I've the same problem too. Temporaly I've configured static arp
>for any addresses, natted by Checkpoint, on routers and it seeem
>to work fine:
>
>arp ARPA
>
>If you or any other solve this problem, please let know us.
>Bye
>sonoro
>
>=================================================
>To set vacation, Out-Of-Office, or away messages,
>send an email to LISTSERV AT amadeus.us.checkpoint DOT com
>in the BODY of the email add:
>set fw-1-mailinglist nomail
>=================================================
>To unsubscribe from this mailing list,
>please see the instructions at
>http://www.checkpoint.com/services/mailing.html
>=================================================
>If you have any questions on how to change your
>subscription options, email
>fw-1-owner AT ts.checkpoint DOT com
>=================================================
>
>_____________________________________________________________________
>This mail was sent by Cablespeed Webmail
>
>=================================================
>To set vacation, Out-Of-Office, or away messages,
>send an email to LISTSERV AT amadeus.us.checkpoint DOT com
>in the BODY of the email add:
>set fw-1-mailinglist nomail
>=================================================
>To unsubscribe from this mailing list,
>please see the instructions at
>http://www.checkpoint.com/services/mailing.html
>=================================================
>If you have any questions on how to change your
>subscription options, email
>fw-1-owner AT ts.checkpoint DOT com
>=================================================
_____________________________________________________________________
This mail was sent by Cablespeed Webmail
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
