hi,
it's always the best idea to have 2 indentical boxes, because
interface names and things like that are the same.
however, VRRP does *not* need to have 2 identical boxes. maybe you
have to play with the fw1-settings. you should disable flows in that case.
cheers
reinhard
At 10:01 25.10.2005, you wrote:
> For a new VPN site, I will set up 2 x Nokia boxes in a VRRP
> HA solution.
> However, one box is an IP330 and the other one is an IP380;
> one of our firewall consultants said that he believed with
> Nokia and VRRP. Does anyone know if this is correct?
Hmmm, I accidentally cut some text in that post; the firewall consultant
believes that with Nokia and VRRP, the hardware must be identical on
both boxes, meaning according to him, I need either 2 IP330's or 2
IP380's. Is this correct?
--
Stig Bull
Networking and Systems Administrator
Hugin ASA
http://www.hugincorporate.com
Phone: +47 22 80 79 89 Mobile: +47 91 60 88 74 Fax: +47 22 80 79 79
- Your reputation connects through Hugin
Any views expressed in this email are those of the author and do not
necessarily represent those of Hugin or its subsidiary companies.
This email and its attachments are intended solely for the addressee and
any information contained therein is confidential. If you are not the
intended recipient of this email, please notify the sender by reply
email or by telephone as soon as possible; do not copy or disclose its
contents to any third party; and note that any action taken on the basis
of its contents may be prohibited and/or unlawful.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
--
Reinhard Stich ASSIST R.Stich AT internet-security DOT at
Internet Security AG, 1150 Wien, Johnstrasse 29
Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
