Firewall-1

[FW-1] Need help with configuring OSPF on the Nokia to work with Cisco d

Subject: [FW-1] Need help with configuring OSPF on the Nokia to work with Cisco device
From: cisco4ng <cisco4ng AT YAHOO DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Thu, 19 Jan 2006 18:55:25 -0800
can someone help me with this problem?
  I have a pair of Nokia IP650 running IPSO 3.9 build 45.
They are running Nokia VRRP in HA (Active/Standby) mode.
THERE IS NO CHECKPOINT RUNNING ON THIS PAIR OF NOKIA.
  
I am running OSPF on this pair of Nokia and this pair
of Nokia is forming OSPF adjacency with a Cisco VXR7206
router running IOS 12.3T.  The Cisco device can see ospf
routes from the Nokia and vice versa.  Now here is my 
problem:
   
  According to Nokia documentation, with IPSO 3.9 or higher,
the cisco router only sees ospf neighbor from the Nokia
VRRP ip address.  What it means is that from the cisco
point of view, it only sees the pair of Nokia IP650 as
A SINGLE device.  Now, when I get on the Standby Nokia,
in iclid mode, I type "show ospf neighbor" or "show 
route ospf", I see neither the cisco router neighbor or
any ospf route on the secondary.  According to Nokia,
I will NOT see ospf routes or ospf neighbor of the cisco 
router on the standby Nokia at all because the OSPF 
adjacency is done via the VRRP ip address of the Nokia.
  The problem is that if the Active Nokia goes down
for any reasons, it takes about 30 seconds for the
Standby to form OSPF with the Cisco device and OSPF 
routes to converge.  Well, I have time-sensitive 
applications that will die within that time frame.
It looks to me like this is a very poor way of 
implementing OSPF on the Nokia.
   
  Is there a work around for OSPF to converge immediately
on the Standby Nokia if something happen to the Active
Nokia?  Nokia TAC told me that OSPF will converge
immediately on the standby if something happen to the
Active Nokia but during my testing, that is not the case.
   
  comments anyone?
  TIA
cisco4ng

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>