Hello,
I've two nokia IP350 are configured in VRRP cluster. Their respective
IP addresses are x.y.z.1 and x.y.z.2 on each connected networks. They share the
x.y.z.3 common VRRP address.
Most of the interfaces support VLAN tagging 802.1Q.
I have activated the option in voyager that tells the nokia to answer
paquets sent to the VRRP IP address.
The rules in checkpoint permits pings from any network to the firewall
.1 .2 and .3 addresses.
Everything worked fine until a few days ago (I didn't change anything)
: from one precise network, the ping to .3 doesn't work anymore.
It still works on .1 and .2 on that network and .3 from all the other
networks.
I have tried to disable and re enable the option in VRRP to answer
packets destinated to the VRRP IP address but didn't change anything.
The logs in the smartview tracker say the ICMP is allowed.
Does anyone have an idea ?
Benjamin Bellière
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
