Firewall-1

Re: [FW-1] Cluster using wrong IP address

Subject: Re: [FW-1] Cluster using wrong IP address
From: René Caspar <caspar AT GENESISCOM DOT CH>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Thu, 27 Oct 2005 09:30:31 +0100
Hi Michael

try to set up two nat-rules which look like:

---------------------
src: [cluster-node 1]
dst: any

xlatesrc: original
xlatedst: original
---------------------
src: [cluster-node 2]
dst: any

xlatesrc: original
xlatedst: original
---------------------

cu

Rene


On Thu, 27 Oct 2005 08:24:51 +0200
"Hendriks, Michael" <mhendriks.consultant AT UPCBROADBAND DOT COM> wrote:

Hi,

I have got a problem with my nokia vrrp cluster, both nodes are running ntp
to sync their time with an internal ntp server.
The active node is doing just fine, it send and receives the packets without a problem, but the second node is sending packets with a source address of the active node and therefore the reply packets will be send back to the
active node which then drops the packets.

Can anybody explain why this is happening and how I can fix it?

Kind regards,

Michael


********* DISCLAIMER ********* This message and any attachment are confidential and may be privileged or otherwise protected from disclosure and may include proprietary information.If you are not the intended recipient, please telephone or email the sender and delete this message and any attachment from your system. If you are not the intended recipient you must not copy this message or
attachment or disclose the contents to any other person



=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================


Mit freundlichen Grüssen / Best Regards

René Caspar
Security Engineer

GENESIS COMMUNICATION
René Caspar
Bernstrasse 34
CH-3072 Ostermundigen

Telefon:           ++41 (0)31 560 35 35
Fax:                 ++41 (0)31 560 35 45
Mobile:            ++41 (0)79 471 21 86

E-Mail:             caspar AT GenesisCom DOT ch
Web:               www.GenesisCom.ch

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>