Edit the cluster object. On the "3rd party Config" tab, uncheck the
option "Hide Cluster Members' outgoing traffic behind the Cluster's IP
Address".
--
David DeSimone == Network Admin == 214-800-7670 == fox AT verio DOT net
"The biggest cause of trouble in the world today is
that the stupid people are so sure about things and the
intelligent folk are so full of doubts." -- Bertrand Russell
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of Tom
Brown
Sent: Thursday, October 27, 2005 8:53 AM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: Re: [FW-1] Cluster using wrong IP address
> I've tried it, but it doesn't seem work :-( I've made a mistake in my
> explanation below though, the second node isn't using the ip-address
> of the first as I said before, it's using the virtual ip-address of
> the cluster. Don't know if this changes anything for the solution
> proposed below?
i have this same issue on a SPLAT R55 cluster - The 'slave' tries to
send packets out from the 'cluster' IP, which the 'master' currently
has, rather than from its own IP and obviously gets dropped -
If you find a solution please post to the list!
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
