This must be something with load balancing only. We are purely in HA mode.
The load balancing in ClusterXL is... eh... well, I suppose it depends on
the environment you are using it in.
I wonder if this is some legacy code that was not removed from ClusterXL?
-Matt
|---------+-------------------------------------------->
| | Salomé Reíllo <sreillo AT SISTEL DOT ES>|
| | Sent by: Mailing list for |
| | discussion of Firewall-1 |
| | <FW-1-MAILINGLIST AT AMADEUS.US DOT CHEC|
| | KPOINT.COM> |
| | |
| | |
| | 08/27/2004 01:07 AM |
| | Please respond to Mailing list |
| | for discussion of Firewall-1 |
| | |
|---------+-------------------------------------------->
>----------------------------------------------------------------------------------------------|
|
|
| To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
|
| cc:
|
| Subject: Re: [FW-1] Pings between cluster members
|
>----------------------------------------------------------------------------------------------|
We have ClusterXL from Checkpoint. We have a load balancing configuration
with two enforcement modules (two members in the cluster) and one
SmartCenter.
----- Original Message -----
From: <GoddardM AT SCHNEIDER DOT COM>
To: <FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
Sent: Thursday, August 26, 2004 3:53 PM
Subject: Re: [FW-1] Pings between cluster members
> This is interesting to me; what type of Cluster are you running and in
what
> configuration? We have several ClusterXL clusters and did not have to
> create any rule for ICMP. Then again, ClusterXL uses CCP which uses UDP.
> I'd be interested to know more about the cluster software you are
running,
> of all the software I know of (Stonebeat, Rainfinity, Nokia VRRP, etc).
>
> -Matt
>
>
>
> |---------+-------------------------------------------->
> | | Salomé Reíllo <sreillo AT SISTEL DOT ES>|
> | | Sent by: Mailing list for |
> | | discussion of Firewall-1 |
> | | <FW-1-MAILINGLIST AT AMADEUS.US DOT CHEC|
> | | KPOINT.COM> |
> | | |
> | | |
> | | 08/26/2004 12:59 AM |
> | | Please respond to Mailing list |
> | | for discussion of Firewall-1 |
> | | |
> |---------+-------------------------------------------->
>
>
---------------------------------------------------------------------------
-------------------|
> |
|
> | To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
|
> | cc:
|
> | Subject: Re: [FW-1] Pings between cluster members
|
>
>
---------------------------------------------------------------------------
-------------------|
>
>
>
>
> Thanks very much. I knew what ICMP packets were, but I was asking about
the
> use of this packets between the members of a cluster (about the use of
ICMP
> packets in that case). I wanted to know the need of this packets because
I
> had to add a specific rule to permit this traffic in order to avoid
dropped
> packets.
>
> Thanks in advance.
> ----- Original Message -----
> From: "Jerry Eblin" <Jerry.Eblin AT RRSC DOT COM>
> To: <FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
> Sent: Wednesday, August 25, 2004 6:53 PM
> Subject: Re: [FW-1] Pings between cluster members
>
>
> > ICMP (internet control message protocol) packets are used for a variety
> of
> > reasons. Normally they include messages or queries regarding the
> operation
> > of a network. Some of the more used types of ICMP packets are as
follows:
> >
> > ICMP requests: happens when you "ping" an IP address
> >
> > ICMP replies: is the response generated by the
> destination
> > address in response to an ICMP request
> >
> > Destination Unreachable: is the response generated by the end
> > gateway/router/etc when the network/host you are trying to reach is
> > unavailable
> >
> >
> > If you do a search for RFC792, you can get more information on the
types
> of
> > packets used in an ICMP packet. I hope this helps you.
> >
> >
> >
> >
> > Salomé Reíllo
> > <sreillo AT SISTEL DOT E
> > S>
> To
> > Sent by: Mailing
> FW-1-MAILINGLIST AT AMADEUS.US DOT CHECKPO
> > list for INT.COM
> > discussion of
> cc
> > Firewall-1
> > <FW-1-MAILINGLIST
> Subject
> > @AMADEUS.US.CHECK [FW-1] Pings between cluster
> > POINT.COM> members
> >
> >
> > 08/24/2004 04:36
> > AM
> >
> >
> > Please respond to
> > Mailing list for
> > discussion of
> > Firewall-1
> > <FW-1-MAILINGLIST
> > @AMADEUS.US.CHECK
> > POINT.COM>
> >
> >
> >
> >
> >
> >
> > Hi everybody. Does anyone know why I am having ICMP packets between
> cluster
> > members. I have had to add a rule to permit ICMP packets between
members
> > cluster in order to have the cluster working. Do you know why it is
> > happening this?
> > What are this ICMP packets used for?
> >
> > Thanks in advance.
> >
> >
> > =================================================
> > To set vacation, Out-Of-Office, or away messages,
> > send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> > in the BODY of the email add:
> > set fw-1-mailinglist nomail
> > =================================================
> > To unsubscribe from this mailing list,
> > please see the instructions at
> > http://www.checkpoint.com/services/mailing.html
> > =================================================
> > If you have any questions on how to change your
> > subscription options, email
> > fw-1-owner AT ts.checkpoint DOT com
> > =================================================
> >
> > =================================================
> > To set vacation, Out-Of-Office, or away messages,
> > send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> > in the BODY of the email add:
> > set fw-1-mailinglist nomail
> > =================================================
> > To unsubscribe from this mailing list,
> > please see the instructions at
> > http://www.checkpoint.com/services/mailing.html
> > =================================================
> > If you have any questions on how to change your
> > subscription options, email
> > fw-1-owner AT ts.checkpoint DOT com
> > =================================================
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
