Firewall-1

Re: [FW-1] Cluster using wrong IP address

Subject: Re: [FW-1] Cluster using wrong IP address
From: Michael Schwartzkopff <ccse_fw1 AT MULTINET DOT DE>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Thu, 27 Oct 2005 17:06:28 +0200
Am Donnerstag, 27. Oktober 2005 15:52 schrieb Tom Brown:
> > I've tried it, but it doesn't seem work :-(
> > I've made a mistake in my explanation below though, the second node isn't
> > using the ip-address of the first as I said before, it's using the
> > virtual ip-address of the cluster. Don't know if this changes anything
> > for the solution proposed below?
>
> i have this same issue on a SPLAT R55 cluster - The 'slave' tries to
> send packets out from the 'cluster' IP, which the 'master' currently
> has, rather than from its own IP and obviously gets dropped -
>
> If you find a solution please post to the list!

Hi,

the solution is very easy and quite logically. Insert a NAT rule on top of the 
list. If origin gateway -> do not modify! Thats all. It works.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>