Hello list, I'm planning to migrate my External firewall interface from one
primary router (routerP) to a secondary much more robust router (routerS).
My platform is Nokia IP350 IPSO 3.7-BUILD032
My net infrastructure is as follows:
routerP
routerP
|
|
eth1-0
eth1-0
lan ---- eth4-0 - fw-1 - eth3-0 -- vrrp interface -- eth3-0 - fw-2 - eth4-0
-- lan
eth2-0
eth2-0
|
|
routerS
routerS
fw-1 and fw-2 form a cluster (running vrrp)
eth1-0 connects to routerP = External Interface. public IP address scheme,
Internet access.
eth1-2 connects to routerS = Clients Interface, internal IP address scheme,
several serial interfaces with WAN connections.
eth4-0 connects to local LAN
eth-3-0 connects to vrrp
I am connected from fw-1 and fw-2 to routerS through a small switch.
I am connected from fw-1 and fw-2 to routerP through a small switch.
I want to eliminate routerP, and migrate my Internet connection (routerP)
to routerS, mantining either the Clients interface (internal IP scheme) or
migrating to the External Interface (Public IP scheme).
I suppose the Gateway Cluster's Properties - General Properties window
defines the gateway's external IP address associated with my Checkpoint
license, if I try to use my Clients Interface (internal IP scheme) should I
notify this change to my usercenter account?
How can I make this change?
How can I make this change without affecting my actual IP scheme?
If I need to change my actual IP scheme, what steps should I follow to
perform the migration with the minimum impact to the production
environment? (:-))
I really appreciate any comments, recommendations, past experiences and so
on.
Cheers! / Saludos!
Juan Andrés Galavís
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
