Hi,
We had all sorts of issues getting Nokia platforms to use Trunk ports.
Firstly Nokia only seems to support 802.1q trunk ports, not vendor specific
trunking like Cisco's ISL. The platform does not let you trunk on the
default mgmt VLAN 1, which is a good thing but can cause issues. Finally the
interfaces used for synchronisation do not work very well across trunking
ports.
-----Original Message-----
From: Emmanuel Bailleul [mailto:emmanuel.bailleul AT ADILAN DOT FR]
Sent: 30 October 2003 17:21
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: Re: [FW-1] Nokia IP Clustering 3.7 Build29 - Cluster remove &
rejpin]
*** WARNING : This message originates from the Internet ***
Hi,
One of my collegues had the same issue while using multiple Cisco
switches and trunks between them.
This seemed to cause synchronization problems between the two cluster nodes.
After snooping here and there he found that though the nodes are in
forward mode, they use IGMP and multicast mac addresses when they first
try to synchronize. However, it seems that the second node begins by
first sending a "leave" and after that a "join" to subscribe to the
multicast group, but the switches would not then agree ...
I don't have all the details for now, but I was surprised to hear that
the nokia boxes used IGMP even if not configured to.
Regards,
Emmanuel Bailleul
ASCOM ADILAN
-----Original Message-----
Just out of curiosity, what types of hubs are people using? Is there a
recommended one?
We first had a switch, but had to quickly take that out and replace with
a hub (generic DLink one). However I'm still having (less) occasional
drops in the cluster with the DLink hub. Is there a brand/model someone
is using now that they would recommend?
Thanks,
-JTM
-----Original Message-----
From: Sunjo [mailto:sunjo17 AT YAHOO DOT COM]
Sent: Wednesday, October 29, 2003 12:28 AM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: Re: [FW-1] Nokia IP Clustering 3.7 Build29 - Cluster remove &
rejpin
Hi,
I had the same issue and connecting a Hub for the cluster network
resolved the problem.. Disable Checkpoint fwdemon monitoring the
interface as well,.
Cheers
Sunil
ss.bushby AT REALSOLUTIONSUK DOT COM> wrote:
Hi all,
Just wondered if anyone else has noticed issues with cluster members
(IPSO 3.7 Build29 Forwarding mode - IP530's 1GB RAM + NG-AI) removing
themselves & re-joining the cluster within a few seconds. It seems to
occur sporadically (15mins or up to 1.5 hours).
The entries are found in the system message log link from voyager. In
addition the problem did not manifest itself whilst benchtesting, it
only seems to have started since they went live. I have a pair of
IP330's (same S/W versions - not heavily used) that are not experiencing
this problem.
TIA,
Ross.
Ross Bushby - Senior Security Architect
Real Solutions Ltd, Unit B&C, Oakcroft Business Centre, Oakcroft
Road,Chessington,Surrey,UK. KT9 1RH. Tel +44 (0)208 391 4080, Fax: +44
(0)208 391 4081
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
National Westminster Bank Plc, Registered in England No. 929027. Registered
Office: 135 Bishopsgate, London EC2M 3UR.
National Westminster Bank Plc is authorised and regulated by the Financial
Services Authority and represents the NatWest Marketing Group. The Bank sells
life polices, collective investment schemes and pension products and advises
only on the Marketing Group's range of these products, on a With-Profit Bond
produced by Norwich Union Life (RBS) Limited and also on the RBS Investment
Funds ICVC operated by RBS Collective Investment Funds Limited.
This e-mail message is confidential and for use by the addressee only. If the
message is received by anyone other than the addressee, please return the
message to the sender by replying to it and then delete the message from your
computer.
Internet e-mails are not necessarily secure. National Westminster Bank Plc does
not accept responsibility for changes made to this message after it was sent.
Whilst all reasonable care has been taken to avoid the transmission of viruses,
it is the responsibility of the recipient to ensure that the onward
transmission, opening or use of this message and any attachments will not
adversely affect its systems or data. No responsibility is accepted by National
Westminster Bank Plc in this regard and the recipient should carry out such
virus and other checks as it considers appropriate.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
